Re: MD5 (was Re: Antivirus software will ignore FBI spyware: solutions)

2001-12-08 Thread Karsten M. Self
on Mon, Dec 03, 2001 at 12:45:49PM +, Gil Hamilton ([EMAIL PROTECTED]) wrote: > Karsten Self writes: > >on Mon, Nov 26, 2001 at 01:12:53PM -0800, Tim May ([EMAIL PROTECTED]) wrote: > > > > > Some interesting tips (bottome of this message) for detecting FBI/SS > > > snoopware that NAI/McAfee i

Re: MD5 (was Re: Antivirus software will ignore FBI spyware: solutions)

2001-12-05 Thread measl
> size or checksum changes. Hidden files are trivial to use, > though many utilities ignore their hiddenness, Let's not forget the NT "alternate data streams" "feature". This is where almost anything can be held, and no known virus scanner can touch it. -- Yours, J.A. Terranson [EMAIL PROTE

Re: MD5 (was Re: Antivirus software will ignore FBI spyware: solutions)

2001-12-03 Thread Bill Stewart
>> > Some interesting tips (bottome of this message) for detecting FBI/SS >> > snoopware that NAI/McAfee is now assisting the FBI in installing. >> > I especially like the idea of "type hundreds of random key strokes and >> > see which files increase in size." (Or just look for any file size >> >

Re: Antivirus software will ignore FBI spyware: solutions

2001-12-02 Thread Karsten M. Self
on Mon, Nov 26, 2001 at 01:12:53PM -0800, Tim May ([EMAIL PROTECTED]) wrote: > Some interesting tips (bottome of this message) for detecting FBI/SS > snoopware that NAI/McAfee is now assisting the FBI in installing. > > I especially like the idea of "type hundreds of random key strokes and > see

Re: CDR: Re: Antivirus software will ignore FBI spyware: solutions

2001-11-27 Thread Sunder
On Mon, 26 Nov 2001, Tim May wrote: > On Monday, November 26, 2001, at 11:49 AM, Sunder wrote: > > > a. It may use your OS to hide the key capture log, so you > >won't be able to just watch files. Think of a kernel patch > >that removes all references to a specific file, no

Re: Antivirus software will ignore FBI spyware: solutions

2001-11-27 Thread Tim May
On Monday, November 26, 2001, at 11:00 PM, Jonathan Wienke wrote: ...my entire post snipped ...his comments at bottom snipped... Jonathan, could you please not include the entire post and then "bottom post" (add comments at bottom)? Bandwidth may be getting cheaper, but it remains the be

RE: Antivirus software will ignore FBI spyware: solutions

2001-11-26 Thread Jonathan Wienke
-Original Message- From: Tim May [mailto:[EMAIL PROTECTED]] Sent: Monday, November 26, 2001 1:13 PM To: [EMAIL PROTECTED] Subject: Antivirus software will ignore FBI spyware: solutions Some interesting tips (bottome of this message) for detecting FBI/SS snoopware that NAI/McAfee is now

Re: CDR: Antivirus software will ignore FBI spyware: solutions

2001-11-26 Thread measl
While it's of little help to M$ lusers, those of us in the *nix world can use CDROM based filesystems for all but the user data. Yes, you may be compromised, but it won't change any code (which is definitely *not* to say that you aren't in danger from loss of passphrases, etc.) - at least on sen

Re: Antivirus software will ignore FBI spyware: solutions

2001-11-26 Thread Tim May
[I sent this a couple of hours ago, hasn't appeared on my feed, lne.com. Apologies if you get it twice.] On Monday, November 26, 2001, at 11:49 AM, Sunder wrote: > Great and wonderful except: > > 1. If such spyware has already been installed on your system you can't > trust your os therefore: >

Re: Antivirus software will ignore FBI spyware: solutions

2001-11-26 Thread Declan McCullagh
On Mon, Nov 26, 2001 at 01:38:04PM -0800, Meyer Wolfsheim wrote: > According to a rebutal posted to Declan's list, McAfee.com (not the same > as McAfee) is claiming that neither it nor Network Associates is assisting > the FBI. I admit I'm not familiar with the details of the corporate structure,

Re: CDR: Antivirus software will ignore FBI spyware: solutions

2001-11-26 Thread mmotyka
Sunder <[EMAIL PROTECTED]> wrote : >Great and wonderful except: > >1. If such spyware has already been installed on your system you can't >trust your os therefore: >[snip] > Yes - end of story. >2. Any hard drive you can access so can they. "They" can patch your >disk: >[snip] > The only way I

Re: CDR: Antivirus software will ignore FBI spyware: solutions

2001-11-26 Thread Sunder
code less useful. Not a complete solution. Crypto hygiene and > all. > > Here's the article: > > > Path: >sjcpnn01.usenetserver.com!e420r-sjo4.usenetserver.com!sjcppf01!usenetserver.com!hub1.nntpserver.com!headwall.stanford.edu!newsfeed.stanford.edu!sn-xit-01!sn-post-01!superne

Re: Antivirus software will ignore FBI spyware: solutions

2001-11-26 Thread Meyer Wolfsheim
On Mon, 26 Nov 2001, Tim May wrote: > Some interesting tips (bottome of this message) for detecting FBI/SS > snoopware that NAI/McAfee is now assisting the FBI in installing. According to a rebutal posted to Declan's list, McAfee.com (not the same as McAfee) is claiming that neither it nor Netwo

Antivirus software will ignore FBI spyware: solutions

2001-11-26 Thread Tim May
Here's the article: > Path: >sjcpnn01.usenetserver.com!e420r-sjo4.usenetserver.com!sjcppf01!usenetserver.com!hub1.nntpserver.com!headwall.stanford.edu!newsfeed.stanford.edu!sn-xit-01!sn-post-01!supernews.com!news.supernews.com!not-for-mail > From: Rastus P. Riley <[EMAI