<div>Antivirus is so 1999! I'd be incredibly surprised to see if half of the people on this list actually pay for Antivirus for their client machines and believe that it somehow protects them from being infected at a cost benefit to the resource utilization of modern antivirus software. If somebody tells me that they are having issues with their system being too slow, 9 times out of 10 it is because the AV software is abusing it's right to be on the system.
</div>
<div> </div>
<div>Antivirus is like home owners insurance, it makes you feel better about the "what ifs," but doesn't protect you from the Hurricane Katrina's. </div>
<div><span class="gmail_quote"></span> </div>
<div><span class="gmail_quote">On 6/10/07, <b class="gmail_sendername">toby</b> <<a href="mailto:toby00@gmail.com">toby00@gmail.com</a>> wrote:</span></div>
<div>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">I would suggest you are talking about different people.<br>The malware analysts at any AV company probably dig through more malware samples than you do on a regular basis. They are likely talking about the average quality of code they get.
<br>You (I suspect) are talking more about the ability to write good, subtle malware.<br><br>Underestimating your opponents is a fatal mistake either way. The best malware analysts I know are well aware of the skills of the authors. Likewise so are the authors I know aware of the skills of the analysts.
<br><span class="sg"><br>t<br><br></span>
<div>
<div><span class="e" id="q_1132f658e1fe603a_3"><span class="gmail_quote">On 6/9/07, <b class="gmail_sendername">Dave Aitel</b> <<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:dave.aitel@gmail.com" target="_blank">
dave.aitel@gmail.com</a>> wrote:</span></span></div>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0pt 0pt 0pt 0.8ex; BORDER-LEFT: rgb(204,204,204) 1px solid">
<div><span class="e" id="q_1132f658e1fe603a_5">The weblog snippet below shows the attitude I love about the anti-virus and IDS companies. The "I'm better than you both technically and morally" fantasy they live in is quite amazing. It's like when people derisively say "script kiddie" and 100% of the time they mean "someone who's way better at security than I'll ever be". The reality is that writing malware is incredibly hard, and the people who do it are amazingly talented.
<br><br><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://www.sophos.com/security/blog/2007/05/120.html" target="_blank">http://www.sophos.com/security/blog/2007/05/120.html</a><br><br>"""
<br>
<p>The fact is, whatever the motivation, writing malware is not 'clever', on the whole it's not even particularly difficult. Although this particular author seems to have trouble because the sample we received didn't work.
</p>
<p>It takes a lot more skill to identify and remove malware, but in this case, even that wasn't difficult. So my message to the author is, don't bother, get a real job, but don't bother applying to join SophosLabs. In fact judging by the poor quality of what was submitted, I would recommend a completely different career.
</p>
<p>Update 4th June - If anyone other than malware authors want to join SophosLabs, we're <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://www.sophos.com/companyinfo/careers/uk/822857832455.html" target="_blank">
recruiting</a></p>
<p>Mark Harris - Director of SophosLabs</p>"""<br><span><br><br>-dave<br></span><br></span></div><span class="q">_______________________________________________<br>Dailydave mailing list<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:Dailydave@lists.immunitysec.com" target="_blank">
Dailydave@lists.immunitysec.com </a><br><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://lists.immunitysec.com/mailman/listinfo/dailydave" target="_blank">http://lists.immunitysec.com/mailman/listinfo/dailydave
</a><br><br></span></blockquote></div><br><br>_______________________________________________<br>Dailydave mailing list<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:Dailydave@lists.immunitysec.com">
Dailydave@lists.immunitysec.com</a><br><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://lists.immunitysec.com/mailman/listinfo/dailydave" target="_blank">http://lists.immunitysec.com/mailman/listinfo/dailydave
</a><br><br></blockquote></div><br><br clear="all"><br>-- <br>Nathan Landon<br>Digital Operatives<br><a href="http://www.digitaloperatives.com">www.digitaloperatives.com</a><br>Phone: 808-221-9172