Dear Alto,

@16-Jul-2009, 13:15 +0200 (16-Jul 12:15 here) Alto Speckhardt [AS] in
mid:[email protected] said to Marck:

... <snip>
>> Improve their Themida detection so that it doesn't make mistakes.

AS> You were there when Marek discussed the issue with Grisoft?

No, but as a software publisher, I have often been in contact with
various AV publishers about false positives. They are human. They are
programmers. They make mistakes in some updates to the rules they
issue and these have to be pointed out to them.

This isn't about compromising the integrity of the AV database. Far
from it. It is about making the rules work properly. A false positive
is just as wrong as a completely missed virus. Both require that
corrections be made by the AV publisher.

Are you also claiming that nobody can report a new virus because
adding its detection rules to the database violates the integrity of
the AV software publisher? Two sides of the same coin.

A classic case was when Norton issued a bug ridden database update at
the end of business at the start of a long weekend. We were plagued
with false positives for days. As were many other publishers, since it
was falsely identifying the footprint of any InstallMaker (a lesser
known but standard "setup creator") wrapped installer as infected. It
wasn't corrected until the following Wednesday. But it was corrected.

... <snip>

-- 
Cheers --  //.arck D Pearlstone -- List moderator and fellow end user
TB! v4.2.7.2 on Windows Vista 6.0.6001 Service Pack 1
'

Attachment: pgpVeTkRDVd1C.pgp
Description: PGP signature

________________________________________________________
 Current beta is 4.2.7.2 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to