On Tue, Aug 23, 2022, 5:58 AM 'Gopher-Insane' via golang-nuts < golang-nuts@googlegroups.com> wrote:
> They are suggesting that Go is being more widely used than others, Could be true. making it more of a risk. > I don't see how this follows. What is the risk? It's not a risk to any non-malware writer using Go. I guess it's a risk to the malware-fighting ecosystem? But if so, I think the answer must be to encourage more use of Go, as that will increase familiarity with the language and encourage the development of analysis tools. (Of course this won't help in the long run, because as Go gets normalized malware authors will move on. But there is nothing that the Go community can do about that.) Ian On Tuesday, 23 August 2022 at 13:15:06 UTC+1 jesper.lou...@gmail.com wrote: > >> On Mon, Aug 22, 2022 at 3:30 PM 'Gopher-Insane' via golang-nuts < >> golan...@googlegroups.com> wrote: >> >>> Hi >>> >>> So our security team has raised a concern with Go and malware. The link >>> that was sent to me was >>> https://securityboulevard.com/2021/09/behavior-based-detection-can-stop-exotic-malware/ >>> . >>> I reached out to Bill Kennedy on Twitter who disagreed that Go was a >>> problem. Said it was worth posting here to hear people's thoughts. >>> >>> >> How is the story in the link supporting their position? What is their >> position in the first place? >> >> The story is that malware is being written in languages other than C and >> C++. Well, that's inevitable, because malware is an infinite arms race >> between avoidance and detection. The story is further that we should use >> behavior detection of malware, which is obviously a worthy idea. Most >> languages are useable as vehicles for malware, and I fail to see the reason >> any particular language should be singled out as being of concern. >> >> -- >> J. >> > -- > You received this message because you are subscribed to the Google Groups > "golang-nuts" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to golang-nuts+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/golang-nuts/63527e94-331d-45bd-9d5a-019c0df4aba9n%40googlegroups.com > <https://groups.google.com/d/msgid/golang-nuts/63527e94-331d-45bd-9d5a-019c0df4aba9n%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- You received this message because you are subscribed to the Google Groups "golang-nuts" group. To unsubscribe from this group and stop receiving emails from it, send an email to golang-nuts+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/golang-nuts/CAOyqgcUO3pAZ0phogWdWK7WyCedHEbu%3DYooW8-EQjBmLxanjEQ%40mail.gmail.com.
