[SC-L] SC-L Administrative FAQ

2011-03-23 Thread Kenneth Van Wyk
Greetings SC-L Subscribers, I'm in an airport lounge on the other side of the planet (from my home), and I thought I'd take a few moments to jot down some answers to SC-L administrative issues that come up from time to time here on SC-L. I hope you find them helpful. I try to keep the administ

Re: [SC-L] informIT: Modern Malware

2011-03-23 Thread Andy Steingruebl
On Wed, Mar 23, 2011 at 8:14 AM, Gary McGraw wrote: > > I agree that clueless users who click on whatever pops up lead to many > infections even when software is is reasonable shape, but I don't see that > as a reason not to build better software.  Presumably, you guys at paypal > agree.  Right?

Re: [SC-L] informIT: Modern Malware

2011-03-23 Thread Martin Gilje Jaatun
On 2011-03-23 00:57, Andy Steingruebl wrote: On Tue, Mar 22, 2011 at 8:41 AM, Gary McGraw wrote: [...] malware" as the AT&T guys sometimes think…you use it to find the kinds of bugs that malware exploits to get a toehold on target servers. One level removed, but a clear causal effect. Inte

Re: [SC-L] informIT: Modern Malware

2011-03-23 Thread Gary McGraw
hi andy, If you read the article again, I think you'll find that the solutions offered by both Invincea and Dasient work regardless of whether the malware is installed through broken software or through social engineering. Dasient protects the server side of the APT problem (especially when it com

Re: [SC-L] informIT: Modern Malware

2011-03-23 Thread Andy Steingruebl
On Tue, Mar 22, 2011 at 8:41 AM, Gary McGraw wrote: > hi sc-l, > > The tie between malware (think zeus and stuxnet) and broken software of the > sort we work hard on fixing is difficult for some parts of the market to > fathom.  I think it's simple: software riddled with bugs and flaws leads >