Messages in this thread | | | Subject | Re: [malware-list] [RFC 0/5] [TALPA] Intro toalinuxinterfaceforonaccess scanning | From | Eric Paris <> | Date | Tue, 05 Aug 2008 19:48:52 -0400 |
| |
On Wed, 2008-08-06 at 00:37 +0100, Al Viro wrote: > On Tue, Aug 05, 2008 at 03:26:38PM -0700, Greg KH wrote: > > On Tue, Aug 05, 2008 at 06:12:34PM -0400, Press, Jonathan wrote: > > > Sorry for the top-post... but I give up. > > > > > > I don't think I'm stupid, but frankly I don't understand the point of > > > the questions being asked in the last three responses to my statement. > > > I don't know why they are relevant, and I don't know how to answer > > > them in a framework that we can all understand at the same time. > > Excuse me? One of those questions had been a very specific yes-or-no one > and I certainly hope that we all can understand either answer to such... > > For the record, the question is > > "Do you or do you not expect the malware to be active on scanning host?"
I do believe for a number of AV vendors the answer is yes. I will try to have some offline conversations with the right people at a number of vendors and work to better define the threats that they wish to or believe they are able to help mitigate.
-Eric
> I hope that relevance of that to the analysis of software involved in > scanning should be obvious.
| |