Re: [clamav-users] Virus names - a rose by any name?

2013-01-12 Thread Ralf Quint
At 02:02 PM 1/12/2013, Pancho wrote: Again I believe you are talking at cross purposes but regardless I am entirely comfortable if you disagree with the suggestion I made. As I mentioned to Joel, please feel free to throw it away. Wow, you don't like any criticsm, don't you? Seriously, whatev

Re: [clamav-users] Virus names - a rose by any name?

2013-01-12 Thread Pancho
Again I believe you are talking at cross purposes but regardless I am entirely comfortable if you disagree with the suggestion I made. As I mentioned to Joel, please feel free to throw it away. Thanks -Original Message- From: clamav-users-boun...@lists.clamav.net [mailto:clamav-us

Re: [clamav-users] Virus names - a rose by any name?

2013-01-12 Thread Shawn Webb
In addition to having the same sentiments Joel has, I'd like to explain why not displaying the name of the virus does not add any extra security for a number of reasons: 1. Attackers can already "deduce" ClamAV's engine because it's opensource. They have the blueprints. They already know how it wo

Re: [clamav-users] Virus names - a rose by any name?

2013-01-12 Thread Pancho
It is not an attack on ClamAV Joel - but I tell you what, delete the post if it makes you happier. Truly I'm sorry I wasted the effort trying to contribute, and you can relax because I certainly won't again. -Original Message- From: clamav-users-boun...@lists.clamav.net [mailto:clamav

Re: [clamav-users] Virus names - a rose by any name?

2013-01-12 Thread Joel Esler
So what you want is for us to change the millions of Names we have for Trojans to match one of our competitors? So when people look up the open source detection that we provide in our open signature format, they instead get pointed to a competitor with closed proprietary detection? Even leav

Re: [clamav-users] Virus names - a rose by any name?

2013-01-12 Thread Pancho
Hi - thanks to everyone for the replies. I have seen 2 replies now and it may well be that I have not been clear enough because both are at cross purposes. Unfortunately I don't have further time to invest in this topic but I do hope that someone at ClamAV sees value in the suggestions. If not, w

Re: [clamav-users] Virus names - a rose by any name?

2013-01-12 Thread Simon Hobson
"Pancho" wrote: >While I understand the comment, it makes it risky I believe from a security >perspective to tell users anything more than " file contains virus". > >I say this because if we find a virus and provide the message "file contains >virus with name " then malicious users >can effective

Re: [clamav-users] Virus names - a rose by any name?

2013-01-12 Thread Dennis Peterson
On 1/12/13 5:22 AM, Pancho wrote: All in all for me there is a fairly compelling argument for going this route so I thought I would put it out there to see what others think. Kind regards Ricki Is there something about real-time day one virus outbreaks and US government involvement that you se

[clamav-users] Virus names - a rose by any name?

2013-01-12 Thread Pancho
Hi, At http://www.clamav.net/lang/en/faq/faq-misc/ I found this: Why is ClamAV calling the XXX virus with another name? This usually happens when we add a signature before other AV vendors. No well-known name is available at that moment so we