[funsec] The wildlist

2008-06-02 Thread Alex Eckelberry
Right on, Larry. http://www.eweek.com/c/a/Security/The-AntiMalware-Certification-Problem/ The Anti-Malware Certification Problem Opinion: One of the dirty little secrets of the anti-malware industry is that the WildList doesn't really prove a whole lot about a product. Failure to find all

Re: [funsec] The wildlist

2008-06-02 Thread Bruce Ediger
Apparently from: > http://www.eweek.com/c/a/Security/The-AntiMalware-Certification-Problem/ ... > In fact, insiders in the anti-virus industry, especially vendors, are > widely derisive of the WildList, looking on it as an outdated burden on > their development. The malware in it is outdate

Re: [funsec] The wildlist

2008-06-02 Thread Drsolly
On Mon, 2 Jun 2008, Bruce Ediger wrote: > Apparently from: > > http://www.eweek.com/c/a/Security/The-AntiMalware-Certification-Problem/ > ... > > In fact, insiders in the anti-virus industry, especially vendors, are > > widely derisive of the WildList, looking on it as an outdated burden on

Re: [funsec] The wildlist

2008-06-02 Thread coderman
On Mon, Jun 2, 2008 at 5:16 PM, Drsolly <[EMAIL PROTECTED]> wrote: > ... > Telling people to "Practise safe Hex" was, I agree, pretty useless. > Telling people to switch their operating system (or change their computing > platform), and change all their application software, would have been even >

Re: [funsec] The wildlist

2008-06-03 Thread Drsolly
On Mon, 2 Jun 2008, coderman wrote: > On Mon, Jun 2, 2008 at 5:16 PM, Drsolly <[EMAIL PROTECTED]> wrote: > > ... > > Telling people to "Practise safe Hex" was, I agree, pretty useless. > > Telling people to switch their operating system (or change their computing > > platform), and change all thei

Re: [funsec] The wildlist

2008-06-03 Thread David Harley
> > In fact, insiders in the anti-virus industry, especially > vendors, are > > widely derisive of the WildList, looking on it as an > outdated burden > > on their development. This is misleading. There are certainly critics of the WildList, in and out of the AV industry, and not without reas

Re: [funsec] The wildlist

2008-06-03 Thread David Harley
> Every AV company had, as target, to detect *all* viruses, > irrespective of whether it was known to be in the wild or > not. The wildlist was mostly of use to consumers to help them > avoid poor AV products. Actually, it has virtually no direct relevance to consumers nowadays. Most of the nam

Re: [funsec] The wildlist

2008-06-03 Thread David Harley
> Right on, Larry. Not really. Though some of the problems I have with the review could be said to be WLO's fault, for failing to have its web site and documentation keep pace with where it is these days. The WildList's deficiencies are well-known, but being addressed (albeit with terrifying slown