Re: whitehat to test a security config

2005-11-03 Thread Bernd Eckenfels
On Fri, Nov 04, 2005 at 01:19:36AM +0100, Javier Fernández-Sanguino Peña wrote: > But also somewhat wrong: a black-box test is much cheaper than a full > security audit of a system. Well, I guess you mean "port scan". A Tiger Team who helps your security is most often quite expensive cause it take

Re: whitehat to test a security config

2005-11-03 Thread Javier Fernández-Sanguino Peña
On Wed, Nov 02, 2005 at 11:14:22PM +0100, Bernd Eckenfels wrote: > In article <[EMAIL PROTECTED]> you wrote: > > I'm looking for (preferably) a company, or individual, to attempt to > > breach a standard config I have created to deploy client applications > > in production. It is intentionally a

Re: whitehat

2005-11-03 Thread Javier Fernández-Sanguino Peña
On Wed, Nov 02, 2005 at 05:33:54PM -0800, Alvin Oga wrote: > > The whole point of the test will be for me to monitor what's happening > > that you should already be seeing all the attacks you are already > getitng just by the generic background white-noise-attacks > - and its free ... and d

Re: clamav and magic byte

2005-11-03 Thread Andrey Bayora
OK, last try to convince you... :) > It's not a bug, it's a design property of such ssystems In other words: it is a design error (feature). As I point out my whitepaper, the "changed" viruses STILL detected with the SAME signature. And then, "a magic" - you change the FIRST byte to anything and

Re: clamav and magic byte

2005-11-03 Thread Florian Weimer
* Andrey Bayora: > OK, last try to convince you... :) > >> It's not a bug, it's a design property of such ssystems > > In other words: it is a design error (feature). Sure, if you want to put it that way. > As I point out my whitepaper, the "changed" viruses STILL detected with the > SAME signat

Re: clamav and magic byte

2005-11-03 Thread Florian Weimer
* Andrey Bayora: >> "...Andrey Bayora just describes one way to create new viruses, there are > countless others." > > Please, read http://www.securityelf.org/magicbyteadv.html - there > are 13 CVE numbers issued for this BUG. Often, CVE numbers are assigned because vendors release updates, not t

Re: Re: clamav and magic byte

2005-11-03 Thread Andrey Bayora
Hi Florian, > "...Andrey Bayora just describes one way to create new viruses, there are countless others." Please, read http://www.securityelf.org/magicbyteadv.html - there are 13 CVE numbers issued for this BUG. If it is not - why AV vendors issues patches for this "issue"? The "new viruses" op

volunteer computer-geek to help us for FREE? please contact !

2005-11-03 Thread jan tore
Hello !!! we send out donation links now a days! pluss send old computers for Africa. we register importent books/articles/science ALL from prosessors of all kinds pluss much much more to translate print free etc. we do more importent stuff but red cross still out