Slashdot Mirror
Desktop Search Tools Will Help Virus Writers
An anonymous reader writes "With desktop search tools all the rage, ZDNet is reporting that virus writers could take advantage of the technology to produce more efficient malware. "Any software that can index and capture data on a users PC will be subject to virus and Trojan exploits. It is just a matter of time," said an analyst at Frost & Sullivan. "
Don't shoot the messenger. Desktop search is only exposing a weakness that is already there as it can only index stuff it has permission to index.
As always, Schneier is particularly lucid on this issue, see his essay here
Simon.
"It sounds like great technology but don't deploy it without considering the security implications. With any new product area there is a need to consider security," said Campbell.
How about we not worry about userland programs being "insecure" when the real issue is that the malware was installed on the machine in the first place. Just because the desktop search features can index a large amount of personal data does not mean it's a security issue... The security issue is something entirely different and needs to be treated as such.
Are we supposed to just suffer through computer-use because Microsoft and its users are lax about security so that life is easier?
Dimension Data's Campbell said that if companies do choose to deploy desktop search tools, they should take extra care to ensure viruses do not get a chance to execute on the desktop.
Companies like who? Microsoft right? Oh wait, we are supposed to just live with how shitty Windows is at userlevel security right?
This article was a bunch of trash and really was speculation more than anything else. Move along, there's nothing to see here...
Athletic Scholarships to universities make as much sense as academic scholarships to sports teams.
"more efficient malware"
Do virus writers really care that much about efficiency? It's not their PC that's gonna run the thing. They could just as easily make the thing continually grep for documents containing 16 digit Luhn-validated numbers and send them off someplace when they're found.
Unknown host pong.
So tell me, is there any technology that virus writers can't take advantage of?
And don't say Fire Walls. It wasn't so long ago that a well-known fire wall itself proved to be the vulnerable chink in the system.
"It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
Technology can be applied for either good or evil.
Who'd have thunk?
Click here or here.
I have always found "grope" to be a much more effective and fun exploit. Whether you're in the office, or on-the-go, grope gets results !
or maybe it will be easier to track down the malware since it will be indexed along with everything else?
Filesystems!
We must eliminate these horrors from operating systems or we will never be rid of all this nonsense. And after we get rid of filesystems, executables should be the next thing to go.
Let me know when they invent the knife you can't cut a person with.
Imagine having a job where you're paid big money to state the obvious. The dream of all useless people is to become an analyst.
Undoubtedly someone will point out that one tool is more useful for nefarious deeds than another, but then how many people get killed by staplers? This is not news!
Stand back. I've got a brain and I'm not afraid to use it.
My solution to this problem is iron-clad. I keep all my banking accounts empty and have nothing of value on my computer, or in life.
but have you considered the following argument: shut up.