El Jueves, 12 de Junio de 2003 15:52, Mark Janssen escribió:
> Just add the signatures in the e-mail to your current database. That way
> you don't need to transfer the 1+ MB file every time, serverload should
> be a lot less for the update servers, and you're updates are
> direct/faster too.

Yes, this a great idea but ...
(1) The virusdb list must be a private one that allow only trusted people to 
send new virus signatures emails to it.

(2) If I automate the virus database update process to add news virus by 
email, I'm opening a hole to my system. Everyone that knows my email addres 
in the virusdb list and the virus list messages format may send me false 
virus signatures that will be automatically added to my virus database.
I believe that this hole may be solved adding a m5checksum or PGP digital 
signature to all the messages sent to this list.

What do you think about this ?

Greetings.
---
Carles Xavier Munyoz Baldó
[EMAIL PROTECTED]
http://www.unlimitedmail.net/
---


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


Reply via email to