On Jun 6, 2005, at 11:22 AM, Matt Fretwell wrote:
Michel Arboi wrote:
You're distributing malware, so you're bad.
Clamav does not even catch half of the worms that are currently in the
wild. Most of them are dangerous IRC bots.
I was about to ask how I can help the project. I will not. I think
that you don't need "bad" people.
Calm down chaps :) It is a bad idea to put the files where they are
publicly available. That is a simple fact. You are possibly helping to
spread the problem. However, if the files are not currently detected,
submitting them would be helpful. If you ask on the list, one of the
devel's will advise you regarding how, if you have a large amount to
submit.
I think he said he did submit them but didn't get feedback on it.
As for posting them while I'm sure there are opinions both ways, he
probably didn't feel like it was violating anything that a script
kiddie with an IQ above a hamster didn't already have or have access
to, since they were "captured" in the wild. I just finished reading a
honeynet bot tracking paper where they had their Win2k/XP honeypots
violated in ten minutes on a dialup line, and they easily captured IRC
bots with some monitoring utilities in a very short amount of time. Is
this going to degenerate into a war of information freedom vs. security
through obscurity? Hope not...
He was catching things and posting them not out of malice but in an
attempt to be helpful to the group, methinks.
PS: you're distributing an outdated scanner, Im' not sure you are
better than me.
The devel's time is not infinite. I am sure most of them do have other
jobs and things to do also. Do stop trolling and just ask them how to
submit the virii :) ( No use being of a subtle disposition on this
list :)
I also would disagree that he was trolling...sounds like he's peeved at
the acidic response he got when he was just trying to be helpful. If
my kid drops a bowl of cake batter while trying to "help" daddy in the
kitchen while he's baking, sure I'm upset for a second or two,...but he
didn't do it on purpose and his motives weren't bad. He's just being a
kid, and I should be glad he was trying to help me out. This guy found
that a number of "malware" programs weren't detected as such by ClamAV
while other "AV" products did detect them and he was trying to bring it
to the attention of the ClamAV people. If he were trying to be a prick
or have ill intentions, I'm pretty sure he wouldn't have bothered
coming here to have bile thrown back at him for his efforts.
If his message is considered trolling...geez...haven't you guys been on
Usenet at all? THAT has true trolling.
_______________________________________________
http://lurker.clamav.net/list/clamav-users.html
