Re: Re: Malware sharing? People are full of shit [was: Getyour computer viruses here!]

[Drsolly <drsollyp () drsolly com>]

On Fri, 30 Dec 2005, Gadi Evron wrote:

> Drsolly wrote:
> > But would you entrust someone with samples, knowing that these will wind 
> > up on a VX web site? I know a *lot* of people who would not.
>
> The rule has always been, follow the rules of the guy who shares with you.

The rule has always been, you trust somewone to make good decisions about 
sharing, or you don't. I would refuse to follow someone elses rules, it 
just isn't practical.

Imagine that I get samples from 30 other researchers, and each of them 
try to impose different sets of rules on me. Some of the samples come 
from multiple sources. It isn't practical for me to be able to work out 
what I can and cannot do with each different sample.
 
> Personally, I still hold to the extreme paranoid (in my view) and Nick 
> helps out when I need someone with more sharing paranoia than my own. 
> Still, I am just respecting established standards that I believed in 
> until recently. Today I still believe in most of them, but not in the 
> strictness of which they are being followed.

Val believes in none of them. His "rule" is that anyone can have anything, 
he's running an unlimited VX exchange, and has put himself outside the 
ethical community. I would not trust Val to make good decisions about who 
to share samples with, because he's declared that he doesn't make any 
decisions.

> At least, I would argue that they are being followed for the wrong 
> reasons as hiding this information so the Bad Guys don't get it is NOW 
> useless.
 
Why do you refer to "information"? What we're talking about here, is 
malicious software.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.