Slashdot Mirror
Kaspersky Source Code In the Wild
mvar writes "The source code of an older version of 'Kaspersky Internet Security' has been circulated on the internet. The code was created in late 2007 and was probably stolen in early 2008. Names contained in the source indicate that the stolen code was probably a beta version of the 2008 software package – the current release is Kaspersky Internet Security 2011. According to a Russian language report by CNews (Google translation), the code was copied by a disgruntled ex-employee. The thief has reportedly been trying to sell the code on the black market for some time, and Kaspersky says that the code archive already appeared in various private forums last November."
And, in other news, Microsoft has released Windows 95 to rapturous applause.
Is there a difference?
How many people (perhaps apart from malware writers) will really be affected by this disclosure of the source for some 4-year-old software?
This may lead to a better version, but I think not. Dr. Kaspersky is much better than most at detecting stuff than most. False positives included.
McLaughee and Norton are douche bags across the board. Tireless self-promoters as it were. Now if Frans Veldman would ressurect ThundetByte.
We can only hope.
Code to a 4 year old anti virus app, whats that going to be worth? Kaspersky was great until a few years ago. Then one release made my parents older p4 system near unusable. It went from firefox loading in a few seconds to close to 30 seconds. Forums were filled with the same complaints and no real fixes. I changed to Avast and its been great.
Only the State obtains its revenue by coercion. - Murray Rothbard
Another disgruntled employee. I wonder why he is disgruntled...
I wish them luck recovering it so they don't have to rewrite it from scratch.
(Copyright infringement is not theft.)
In general, it is safe and legal to kill your children. -- POSIX Programmer's Guide
Kaspersky users might need to think about ditching their antivirus. The good news is Ubuntu will welcome them with open arms.
"I'm taking this loop off." - Jack O'Neill
"The source code of an older version of 'Kaspersky Internet Security' has been circulated on the internet. The code was created in late 2007 and was probably copied in early 2008. Names contained in the source indicate that the copied code was probably a beta version of the 2008 software package - the current release is Kaspersky Internet Security 2011. According to a Russian language report by CNews (Google translation), the code was copied by a disgruntled ex-employee. The copier has reportedly been trying to sell the code on the black market for some time, and Kaspersky says that the code archive already appeared in various private forums last November."
Now, isn't that better?
I changed from XP to Windows 7 and skipped anti-virus on my computer. Gmail screens all my documents I receive for viruses, chrome browser has pretty good security, applications I download are from legitimate sources, good backup and archiving, and the occasional malwarebytes scan (yet to find anything in 18 months). Why did I go this route? Well I found I had malware despite having a fully updated Mcafee AV on my XP computer. I realized safe computing and a modern OS would likely be enough for an educated user -- thus far it has been.
everyone change to a real operating system and forget about viruses altogether.
Another wife beater. I wonder why he beats his wife...
In Soviet My House, wife beats me!
Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
I have a lovely stapler at home.
Like Netscape, who released their source code so a bloated, unwieldy application could be improved upon and re-released as something that's actually functional, it seems Kaspersky are following suit. Good on them.
"We live in a global world" - Harvey Pitt, former Securities and Exchange Commission Chairman
Someone check this out to see the quality of this closed code!
Code quality is often a excuse for commercial software to sell VS OSS, and I am interested on how "higher" the quality of this stuff is.
Download.
Works nowdays anyhow so... i really dont care.
Besides, im on Linux.
NO SIG
I'd be curious as to how many backdoors it may contain.
I visited some of these forums today, and fair enough.. the source code is there. Here is what I found:
#include <stdio.h>
#include <kaspersky.h>
char make_prog_look_big[1600000];
main()
{
if (detect_cache())
disable_cache();
if (fast_cpu())
set_wait_states(lots);
set_mouse(speed, very_slow);
set_mouse(action, jumpy);
set_mouse(reaction, sometimes);
printf("Please wait, Kaspersky is scanning your computah)\n");
if (system_ok())
crash(to_dos_prompt);
else
system_memory = open("a:\swp0001.swp", O_CREATE);
while(1) {
sleep(5);
scan_a_single_file();
sleep(5);
update_progress_bar();
sleep(5);
if (rand() < 0.9)
crash(complete_system);
}
return(unrecoverable_system);
}
}
Been using Kaspersky for home and business for over ten years. Given that this is a company whose primary business is security, I find it beyond comprehension that a 'disgruntled employee' could steal and distribute source code. Trust destroyed...
I found myself incapable of replying to a comment (sidenote: no javascript, clicked the 'enable classic discussion system' link but no change occurred, fuck it), so I'll just agree with poster above re: copyright infringement not being theft.
as to the evolution of language, theft still has clear legal and dictionary definitions, and can't be applied to things spuriously just because you like to use poorly thought out retorts.
If memory serves me correctly, someone at Kapersky stated that they didn't believe that people were entitled to privacy.
I wish nothing but the worst for their company.
https://www.youtube.com/c/BrendaEM
If i recall Jackie Chan was doing some tv ads for them...i guess they better call him in.