[funsec] Crap. Why didn't I think of that?

2014-06-17 Thread Valdis Kletnieks
Oy. Vey. Study done by Carnegie Mellon University examine the cost for an attacker to pay users to execute arbitrary code - potentially malware. User at home are asked to download and run an exe without being told what it did and without any way of knowing it was harmless. Each week they

Re: [funsec] Crap. Why didn't I think of that?

2014-06-17 Thread Rob, grandpa of Ryan, Trevor, Devon Hannah
From: Valdis Kletnieks valdis.kletni...@vt.edu Date sent: Tue, 17 Jun 2014 02:34:08 -0400 Each week they increase the payment. Study observed that for payments as low as $0.01, 22% of the people who viewed the task ultimately ran the executable. Once

Re: [funsec] Crap. Why didn't I think of that?

2014-06-17 Thread Michal Zalewski
My security assurance program amounts to paying people $1 for every executable they do not run. /mz ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.