I think the concern is in using the language to wrap malware that would 
otherwise be detected. So not the outcome of the malware but the hiding of 
it.

On Monday, 22 August 2022 at 14:47:55 UTC+1 Thomas Bushnell, BSG wrote:

> This is not a problem that arises from *you *using Go; it's a problem 
> arising from the fact that *other *people are using Go to write malware, 
> and bad security techniques are unable to deal with it.
>
> You could stop using Go entirely and it wouldn't change the dynamic. The 
> better course is not to rely on scanners of the sort the article describes. 
> Anti-virus was never a good strategy anyhow, and is in my opinion 
> dangerous. Tavis Ormandy has enjoyed a constant stream of cases where 
> running antivirus "protections" was actually the gateway to serious 
> exploits.
>
> Behavior-based detection is a good technique to use. 
>
> On Mon, Aug 22, 2022 at 9:30 AM 'Gopher-Insane' via golang-nuts <
> golan...@googlegroups.com> wrote:
>
>> Hi
>>
>> So our security team has raised a concern with Go and malware. The link 
>> that was sent to me was 
>> https://securityboulevard.com/2021/09/behavior-based-detection-can-stop-exotic-malware/
>> . 
>> I reached out to Bill Kennedy on Twitter who disagreed that Go was a 
>> problem. Said it was worth posting here to hear people's thoughts. 
>>
>> Thanks!
>>
>> -- 
>>
> You received this message because you are subscribed to the Google Groups 
>> "golang-nuts" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to golang-nuts...@googlegroups.com.
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/golang-nuts/ed1966c2-675b-4030-911b-7fa618291985n%40googlegroups.com
>>  
>> <https://groups.google.com/d/msgid/golang-nuts/ed1966c2-675b-4030-911b-7fa618291985n%40googlegroups.com?utm_medium=email&utm_source=footer>
>> .
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"golang-nuts" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to golang-nuts+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/golang-nuts/7cdc8e55-b4d8-4787-8cc2-f3e15fb41718n%40googlegroups.com.

Reply via email to