Slashdot Mirror


Eugene Kaspersky: "Our Business Is Saving the World From Computer Villains"

blottsie writes: While the nature of Kaspersky's relationship with the Kremlin remains, at the very least, a matter of contention, his company's influence is anything but hazy. On top of their successful antivirus business, Kaspersky Lab researchers have discovered key details about the now-infamous Stuxnet virus, which was deployed by the U.S. and Israel against Iran's nuclear facilities. Kaspersky analysts later uncovered Flame, which the Washington Post found was another American-Israeli cyberweapon against Iran. All of this is on top of building a highly successful antivirus business. In a new interview with the Daily Dot, Kaspersky elaborates on thoughts about his company, his wealth, and the state of modern cybersecurity.

119 of 288 comments (clear)

  1. This would be a first post... by Anonymous Coward · · Score: 5, Funny

    If it was not posted from a machine running bloody Kaspersky security tools!

    1. Re:This would be a first post... by drinkypoo · · Score: 1

      I remember when AVP came out, it was both the fastest and best NT antivirus around.

      Then they made a few "updates" and we started calling it "a v poo" (IT nerds are known for their maturity) because it would choke your system like a punk.

      It's sad that they're still not capable of making an antivirus product that doesn't turn your awesomesauce PC into a turd.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    2. Re: This would be a first post... by drinkypoo · · Score: 1

      if you had any sense at all for the most part you wouldn't have even needed an antivirus especially back then even though it was the wild west and all...

      You're a nutter, you are. AVP was actually catching virii for me, so I know it was valuable. Haven't had a valid detection in years, but I still run antivirus... because now I have multicore and SSD and the penalty is low.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  2. So 20 years from now... by TWX · · Score: 2

    ...we'll have Kaspersky bloatware slowing down new computers belonging to average people, much like how we have Norton bloatware doing that?

    --
    Do not look into laser with remaining eye.
    1. Re:So 20 years from now... by HornWumpus · · Score: 2

      What other 'reformed' virus authors do you allow to install software on your PC?

      Even if Norton was perfect, they still have decades to go before I'd consider trusting them. I'd install software from 'Cryptolocker LLC' first.

      --
      John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
    2. Re:So 20 years from now... by HornWumpus · · Score: 1

      I was there. Ask any grey beard.

      Norton was the worst virus out there. Impossible to get rid of.

      --
      John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
  3. Sate business by sinij · · Score: 2, Informative

    In Russia, there is no such thing as independent large corporation, there are only nominally privately owned, and formally state owned corporations. While Kaspersky does some good work, they should be treated the same way as NIST is in USA, with a primary mission to protect and advance state interest.

  4. Antivirus business by jbmartin6 · · Score: 1

    And do they have a a successful antivirus business?

    --
    This posting is provided 'AS IS' without warranty of any kind, implied or otherwise.
    1. Re:Antivirus business by SethJohnson · · Score: 1

      Apparently on top of that successful antivirus business, they have done a lot on top of that successful antivirus business.

    2. Re:Antivirus business by Shoten · · Score: 2

      And do they have a a successful antivirus business?

      They must, because they're a fairly prominent sponsor of the Ferrari Formula 1 team.

      Now, the only question I have about that is whether they know they're sponsoring Ferrari, or if they just know they're sponsoring "the only car that's completely red."

      --

      For your security, this post has been encrypted with ROT-13, twice.
  5. "Kaspersky's relationship with the Kremlin" by Nutria · · Score: 4, Informative

    Kaspersky Lab researchers have discovered key details about the now-infamous Stuxnet virus, which was deployed by the U.S. and Israel against Iran's nuclear facilities. Kaspersky analysts later uncovered Flame, which the Washington Post found was another American-Israeli cyberweapon against Iran.

    Anyone who thinks that Kaspersky isn't in bed (voluntarily or not) with the Kermlin is delusional.

    --
    "I don't know, therefore Aliens" Wafflebox1
    1. Re:"Kaspersky's relationship with the Kremlin" by Vokkyt · · Score: 2

      Kaspersky probably is in bed in some way with the Kremlin, it has nothing to do with the quotes you listed.

      Pretty much everyone figured it was a US/Israeli combo for Stux and Flame, not just Kaspersky.

    2. Re:"Kaspersky's relationship with the Kremlin" by Coren22 · · Score: 1

      Except no one does more than speculate this, even Kespersky. There is still only speculation as there is no actual evidence of who did it.

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
    3. Re:"Kaspersky's relationship with the Kremlin" by Vokkyt · · Score: 1

      Understood, but it's not Kaspersky that wrote the summary nor that section of the article. That's from the Daily Dot, copy and pasted by the submitter and approved by the editor. The dude shootin' his mouth off over "Kaspersky in bed with the Kremlin" is just being an idiot and confusing evidence and statements.

    4. Re:"Kaspersky's relationship with the Kremlin" by Coren22 · · Score: 1

      http://politics.slashdot.org/c...

      WMD did exist, and were found.

      As far as Kespersky, they have said there was some evidence of a possible EST in the build of stuxnet. However, this could just as easily be someone in Russia's time getting home from work rather than someone in the US going into work. It also doesn't give any kind of conclusive proof of US involvement in Stuxnet/Flame. Without proof, it is just a theory, therefore shouldn't be put forward as fact.

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
    5. Re:"Kaspersky's relationship with the Kremlin" by HornWumpus · · Score: 1

      There was that retirement party for the Israeli spook general. More or less gave him credit.

      --
      John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
    6. Re:"Kaspersky's relationship with the Kremlin" by oh_my_080980980 · · Score: 1

      "WMD did exist, and were found."

      WTF are you talking about. There were no WMDs found in Iraq. Period. Rumsfeld kept saying he knew where they were but they could not turn them up. There were as no nuclear program. Period. Iraq did not attempt to buy yellow cake uranium. The tubes that Rice claimed would be used to enrich uranium would not have worked. Period. We invaded Iraq because Bush junior wanted to not because the U.S. was under attack by Iraq. Fuck Off you moron.

    7. Re:"Kaspersky's relationship with the Kremlin" by Coren22 · · Score: 1

      Nuclear weapons aren't the only kind of WMD. Iraq had chemical and biologic weapons. We knew they were there as they had used them on the Kurds, and the US sold them to Saddam.

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
    8. Re:"Kaspersky's relationship with the Kremlin" by countSudoku() · · Score: 1

      Right. Also Women's Maternity Dresses are WMDs too. Right, Mr. Sees Conspiracy Everywhere? I'll not even straighten you out with the real story because your kind does not take to logic or verifiable info. Like the good gentleman said before; fuck off, moron. Go watch more faux noose and leave the technical chatter to people actually in the industry, fucknut. Your bullshit denial of global climate change and how we never landed on the moon, and that dinosaurs are made up cartoons are not welcome here, dicklick

      --
      This is the NSA, we're gonna geet U h@x0r5! Also, what is a h@x0r5?
    9. Re:"Kaspersky's relationship with the Kremlin" by Coren22 · · Score: 1

      Of course, I'm the one who has it wrong right?

      http://en.wikipedia.org/wiki/W...

      Read the first line.

      http://en.wikipedia.org/wiki/I...
      specifically
      http://en.wikipedia.org/wiki/I...

      But of course my kind doesn't rely on facts and figures, I just make things up. You are funny.

      Oh, and for technical cred, I currently am a systems engineer working specifically on email systems design. I have the technical cred, do you?

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
    10. Re:"Kaspersky's relationship with the Kremlin" by ITRambo · · Score: 2

      Kaspersky is in bed with the Kremlin in the sense that Symantec is in bed with the NSA, IMO. It's a company response to friendly pressure from their national governments to expose information that suits their purposes. If it was deeper than that, international companies like Kaspersky would quickly become local firms as customers shop elsewhere.

    11. Re:"Kaspersky's relationship with the Kremlin" by tnk1 · · Score: 1

      The thing is... he's right. Iraq did have WMDs of the chemical nature. And yes, the US Government sold them to Iraq. That's all 100% factual.

      Whether they were still functional or whether any of them were actually there to be found 20 years later is a completely different story.

      The real story of the war is why the war was fought over something that we knew that they had for decades. The fact that we didn't actually find much of anything is hilarious, but actually besides the point. We fought a war over something that we'd actually given them.

      Well, that was the reasoning. The real reason we fought the war is because the administration believed we made a mistake leaving Saddam in power, and they wanted to correct that mistake. 9/11 got the ball rolling, and when it didn't seem like anyone was really taking the ALQ threat very seriously, they threw in the WMDs.

      The funny part of all of this is that the US Government wasn't actually trying to pretend there were weapons there that there weren't, the hilarity was that the WMDs were supposed to be the "ringer" because Iraq really did have them. They were expecting Saddam to have maintained them and try to hide them in a semi operational capacity. Instead, he had let them all go to shit and had basically gotten rid of what was left.

    12. Re:"Kaspersky's relationship with the Kremlin" by dbIII · · Score: 1

      Wasn't there some Washington idiot bragging about it at the time? Very noisy "speculation".

    13. Re:"Kaspersky's relationship with the Kremlin" by rtb61 · · Score: 1

      The more polite term is Lead Head, you know just another one of those pseudo Christian conservatives suffering from toxic lead poisoning. Not really their fault, just another one of those mind boggling stupid things humanity has managed to do to itself. No need to be cruel, they are a dying minority, currently still noisy but never the less still passing off into an embarrassing history, not just for who they are but how they were made. So no tin foil hat insulation jokes but actual built in cerebral lead insulation keeping those mind closed off from thoughts and ideas. Keep in mind (something they can't do), it is not their fault and as yet the damage can not be repaired. They are tough to deal with but they are what they are and they are still being produced in some locations due to lead pollutants contained in those locations.

      Lets be honest, all the worlds intelligence agencies are criminally corrupt and should never be trusted and it should always be up to police and communications authorities the world over to catch them and prosecute them and never ever work with them to commit criminal acts or to interfere with the proper course of justice. Passive gathering of intelligence is tolerable, active criminal acts or associating with organised crime or corrupting governments or staging coups are all acts of evil and should never be tolerated and the individuals involved should be prosecuted to the full extent of the law.

      --
      Chaos - everything, everywhere, everywhen
    14. Re:"Kaspersky's relationship with the Kremlin" by donscarletti · · Score: 1

      I currently am a systems engineer working specifically on email systems design.

      And this makes you an authority about Weapons of Mass Destruction how? Even if you were doing email systems design for DuPont or the military, you'd have no authority to cite.

      Also, if you were any good as a "systems engineer" they wouldn't have you working on email, that's a lower rung than even web backends. Whoever was responsible for cooking up Saddam's nasties in the 80s wouldn't even hire guys of your caliber as a floor manager, let alone as an engineer.

      --
      When Argumentum ad Hominem falls short, try Argumentum ad Matrem
    15. Re:"Kaspersky's relationship with the Kremlin" by Coren22 · · Score: 1

      That was in response to this:

      Go watch more faux noose and leave the technical chatter to people actually in the industry, fucknut.

      As this isn't a technical conversation, I took it to mean that I don't belong on Slashdot as I am not technical enough to join the conversation.

      Also, if you were any good as a "systems engineer" they wouldn't have you working on email, that's a lower rung than even web backends.

      So, email, the most vital system to many companies is a low rung system? What do you consider high rung than? Where I work, it is domain, email/storage, etc, but then you must be a programmer who thinks he is hot stuff because he can write code. I design business critical systems, what did you do today?

      --
      APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
    16. Re:"Kaspersky's relationship with the Kremlin" by Whiteox · · Score: 1

      Hey Mod! That comment was supposed to be Funny +1 and not Troll -1
      Go back to Mod school.

      --
      Don't be apathetic. Procrastinate!
  6. Kaspersky is not special by shihonage · · Score: 3, Insightful

    Their program will slow down your computer with all kinds of security theater "features", but like any other antivirus, it will fail to root out most viruses written in the past 8 years once they've been executed and implanted themselves as a rootkit.

    1. Re:Kaspersky is not special by Opportunist · · Score: 1

      Well, duh. When I control your computer, I control what anything running on it can see, including myself.

      But you're invited to write the better mousetrap. I'd be delighted to test it.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    2. Re:Kaspersky is not special by Feral+Nerd · · Score: 1

      Because ?

      I don't remember claiming that *nix systems were immune to malware. That is an figment of your imagination that you invented so that you'd have something to get upset over. Unix systems are, however, vastly less targeted than Windows with the exception of Android (if one can still call it a Linux system) which leads the list of targeted mobile OS'es. Like it or not (and you obviously don't) that makes my life easier. Call it security by obscurity but it is a fact I'm going to be insufferably smug about to every Windows user who brings malware up in conversation until your prediction of Linux dethroning Windows as the emperor of malware comes true. I have firewalls, malware scanners and intrusion detectors running on all my Linux and BSD boxes at work partly because I'm mildly paranoid by nature and partly because my colleagues in the Microsoft systems department are afraid my *nix boxes might be an entry point for Windows malware. It's been very quite on that front for years except for the e-mails I get about files infected with Windows malware. The same goes for my personal MacBook. The only thing the security scanner I installed there ever finds is tracking cookies. It has uncovered a piece of genuine 24 carat OS X malware exactly once in six years and it's rated very well in malware detection tests (not the best anymore though, Avira has been outperforming the competition recently).

    3. Re:Kaspersky is not special by techno-vampire · · Score: 2

      I don't remember claiming that *nix systems were immune to malware.

      Agreed. I run a Linux-only household, except for one Windows laptop that my sister uses because some of the programs she needs for school won't run properly under Wine. I don't run ClamAV or anything like that because I'm not in the habit of downloading random Windows programs and sending them to friends. Right now, almost all of the malware writers are targeting Windows for two reasons. First, that's where most of the potential profit is. Second, there are a lot of anti-social script kiddies out there either using cheat-sheets or cookbooks to write malware programs to exploit vulnerabilities that other people discovered; they've no clue how to fine one of their own. And, those who aren't using the cheat-sheets are using programs that create custom malware for them, so that all they have to do is select a security flaw and a payload and the rest is done for them. And guess what: all of those script kiddies are writing malware for Windows because they can't get their hands on what they'd need to write Linux malware, and wouldn't know how to do it on their own anyway.

      And there's another factor here: Linux has much more security designed into it than Windows does, making it a harder target to attack. Yes, I know that there are still people out that who hate SELinux because it was problematic ten or fifteen years ago, but it does make it harder for a malicious program to do its job. And, of course, the fact that most Linux users get their software from their distro instead of downloading files from various third-parties and hoping they're safe helps a lot.

      Sorry to go on so long, but once I got started there was just more and more that I realized needed saying.

      --
      Good, inexpensive web hosting
    4. Re:Kaspersky is not special by Reziac · · Score: 1

      I bought the Hacking Exposed books.... they were enlightening: Linux isn't really 'safer' than Windows; it just has a different set of vulnerable points (fewer of 'em, but penetrating deeper into the system and more likely to persist across versions). If you want true security, run Netware.

      The patching system may be the real culprit, tho: It's been pointed out that when a Windows version becomes "unsupported" there's an abrupt cessation of newly-found vulnerabilities. Why? Because the bad guys discover the holes mostly (perhaps entirely) by reverse-engineering the official patches ... which with Windows, tend to be monofocused on a single bug, making the hole fairly easy to ID, and thereby paint a handy target on unpatched machines. Conversely linux updates are, to my grok, more likely to address a bunch of stuff at once, making any single hole harder to identify. Likewise, Windows service packs (which address a bunch of stuff at once) have not typically been followed by a rash of newly-found vulnerabilities.

      --
      ~REZ~ #43301. Who'd fake being me anyway?
  7. but... but... but... by Gravis+Zero · · Score: 2

    but i'm a computer supervillain, you insensitive clod!

    --
    Anons need not reply. Questions end with a question mark.
  8. What's /. opinion on AV? by Eloking · · Score: 2

    Just wondering if I'm the only one around here not using any AV for a long time. AFAIK, you can only get your virus on the internet (unless I'm underestimating USB's key viruses). And with gmail (and other huge mail provider) boosted with virus check procedure, Secured browser like Chrome pimped with Adblock and keeping myself far from the "dark side" of the web, I've never had any problem. Add to this the new lite Microsoft Security Essential (intagrated in Win8) to the lot and I'm surprised those company are still in business.

    Or am I naive?

    --
    Elok
    1. Re:What's /. opinion on AV? by Gravis+Zero · · Score: 2

      Just wondering if I'm the only one around here not using any AV for a long time.

      you aren't but if you are using Windows and no AV then you are a fool.

      AFAIK, you can only get your virus on the internet (unless I'm underestimating USB's key viruses).

      you absolutely are underestimating USB key viruses! stuxnet infected airgapped computers using a USB key.

      Chrome pimped with Adblock and keeping myself far from the "dark side" of the web, I've never had any problem

      while this helps it won't keep you completely safe.

      Add to this the new lite Microsoft Security Essential (intagrated in Win8) to the lot and I'm surprised those company are still in business.

      i'm not surprised at all. windows defender only detects ~75% of malware. at any given time, MS is about a year behind the AV curve.

      there is a good chance you are infected with some malware.

      --
      Anons need not reply. Questions end with a question mark.
    2. Re:What's /. opinion on AV? by jader3rd · · Score: 1

      As long as the user you run as is a Standard user without admin privileges you're probably fine.

    3. Re:What's /. opinion on AV? by Eloking · · Score: 1

      So your opinion is that paid AV is a must for any windows OS? And that Kapersky (or norton) is the only way to be completely protected from viruses?

      --
      Elok
    4. Re:What's /. opinion on AV? by Zaelath · · Score: 2

      you aren't but if you are using Windows and no AV then you are a fool.

      you absolutely are underestimating USB key viruses! stuxnet infected airgapped computers using a USB key.

      'm not surprised at all. windows defender only detects ~75% of malware. at any given time, MS is about a year behind the AV curve.

      On the other hand, nothing detected Stuxnet until many years after it was distributed, and it's a horrible example of general public USB virus. It's like suggesting people should build fallout shelters because they have any chance at all against a nation state.

      On top of that, AV does /nothing/ for 0-day.

      How you act and how attractive you are influence your likelihood of attack more than any other factor. If your behaviour is so risky that you need doubleplusgood AV then perhaps you should be doing that kind of thing in a Virtual Machine on a segregated network instead of the same machine you do your banking on, because you WILL get infected.

      Like any other security measure, AV is a layer of protection, and for that reason MS Essentials does an acceptable job for {most|cautious|honest} people. Your grandparents that click on /every/ link and open /every/ attachment emailed to them "in case" may need a paid solution, or better still, an Apple computer since they're still a much smaller target than Windows.

  9. Re:Agreed 110% & I'm right there w/ ya Mr. K. by Anonymous Coward · · Score: 1

    that's surprisingly brief, almost makes me wonder if it's really APK

  10. The problem with security by Anonymous Coward · · Score: 1

    The problem with security is not that security companies are doing worse at making their products. Its that when they did make bad bloated and slow products the end user lost interest. Not to mention we do not have the rampant wide spread out breaks that we used to. Some of this is due to better OS and browser security, also users are finally becoming smarter and the fact the bad guys see more gain in hacking companies the messing with individual PC users. I just finished uninstalling McAfee Live Safe, not because its a lousy product. But because I bought a HP Stream with 2GB RAM and running any kind of security suite will most likely affect performance and use up some RAM. If you look at how these security businesses have basically shrank in consumer markets and along with that so have their profits. Its no wonder they keep saying the sky is falling, the sky is falling. Because they must keep some people paranoid enough to keep buying into their products. The stuff that really affects you, none of these suites ever seem to detect it anyway.

    1. Re:The problem with security by Anonymous Coward · · Score: 1

      Your hypothesis seems to ignore the vast prevalence of cryptolocker like infections that have become the norm lately.

  11. Re:AdBlock = Inferior vs. hosts + 'Souled-Out' by bouldin · · Score: 2

    Protect vs. DGA botnets + stop communique to C&C servers

    Sorry, this is still incorrect. The whole point of a Domain-Generating Algorithm is to evade domain name blocking and takedowns.

    By the time you add known DGA domain names to a blocklist, they are already defunct, and the malware has moved on to new domain names.

  12. reporting comedy by HughJazz · · Score: 1

    It's hilarious when American news sources would accuse Kaspersky of spying for Russian government. Where where they when virtually all major US tech companies were spying on the entire planet on behalf of the NSA? It only took them Snowden handing them indisputable proof for these unprincipled "reporters" to notice.

    Of course the lesson here isn't that America is all bad and Russia is all good. It's that lots of people that preach about ethics to others.... don't actually follow the very principles they claim to stand for.

  13. Re:State business by Anonymous Coward · · Score: 1

    I grew up in the US in the 80s, and I was basically taught to believe that all Russians are completely untrustworthy.

    (See any "Russian" character played by a Hollywood actor in any US movie or TV show from the 80s and early 90s, with one single exception: Sean Connery in The Hunt for Red October.)

    As a result, I'm far more worried about Kapersky personally trying to steal from me than I am about his ties to KGB/whatever. I know it was 99% propaganda, but I still don't trust anyone with a Russian name or accent.

  14. Re:AdBlock = Inferior vs. hosts + 'Souled-Out' by behrooz0az · · Score: 1

    Not if the system has been offline for some time.

    --
    Moderating "-1, Disagree" is simple censorship. Have the guts to post your opinion. -- Spazmania (174582)
  15. In the age where we see Putin as the face of Russi by azav · · Score: 1

    It's nice to see positive news like this coming out of Russia.

    Really nice.

    --
    - Zav - Imagine a Beowulf cluster of insensitive clods...
  16. Re:Hosts can block any domain name by bouldin · · Score: 2

    Hosts can block any domain name

    Not true, a hosts file is trivial to bypass. Any piece of software can send TCP/UDP 53 traffic to a DNS server and resolve the name itself.

    Question #2: Is that what YOU DO WITH YOUR DGA BOTNET, Mr. Expert (who speaks for all botnet masters like himself)?

    I don't run botnets, but I do understand what a domain-generating ALGORITHM is. The algorithms are seeded with the current time, so the list of domains is always changing.

    Now, if you reverse engineer the algorithm out of the malware, you could theoretically build a list of all domain names the malware will use in the future, but usually when I hear about reverse engineering a DGA, it's because microsoft and other companies have pre-registered those domain names as part of a botnet takedown. At any rate, you clearly don't understand what you're talking about.

  17. Re:Answer my questions quit avoiding them... apk by bouldin · · Score: 1

    What software is that? You're avoiding a SIMPLE question! If I block a domain name in hosts IS IT BLOCKED (DGA generated or not)??

    No.

    The python code below resolves example.com by connecting directly to Google's DNS servers. It does not check the hosts file.

    import dns.resolver

    resolver = dns.resolver.Resolver(configure=False)
    resolver.nameservers = ['8.8.8.8']
    ans = resolver.query('example.com', 'A')

  18. Re:No no senor: Mainstream, not custom... apk by bouldin · · Score: 1

    What software is that? You're avoiding a SIMPLE question! If I block a domain name in hosts IS IT BLOCKED (DGA generated or not)??

    No.

    The python code below resolves example.com by connecting directly to Google's DNS servers. It does not check the hosts file.

    (Answer that question... & again - this question too: IF/WHEN I block a domain OR subdomain in hosts, IS IT BLOCKED?)

    The answer is "no," but I just answered that question.

    I could write my own code too - mainstream widely used wares... what ones do that?

    So, you're asking what malware in the wild evades hosts files? None that I know of, but that does not mean your approach is secure. We fix vulnerabilities before they are exploited, not after.

    P.S.=> You're a weasel, above ALL else, & one that refuses to answer a SIMPLE question above (& the other one on blocking too)... apk

    I don't think you understand security. Attackers are sneaky and do whatever they can to evade controls.

  19. Re:Mainstream, not custom... apk by bouldin · · Score: 1

    I said:

    So, you're asking what malware in the wild evades hosts files? None that I know of, but that does not mean your approach is secure.

    Then you said:

    It seems also that you're vainly & effetely attempting to say "every computer under the sun has a virus/malware that does DNS queries itself"

    What part of that makes sense to you?

  20. Re:Then I have to tell you... apk by bouldin · · Score: 1

    Wait, what did I learn? That you can block IPs with a firewall?

    I need to make sure

  21. Re:Let's quote YOU directly shall we? by bouldin · · Score: 1

    Oh, ok. It's hard to understand your verbal diarrhea.

    No, malware that connects directly to an IP isn't designed to evade host files. It's just primitive malware that didn't bother to implement DNS-based resiliency.

    And no, if you block a domain in a hosts file, you are not secure from connections to the domain. 4 lines of Python can bypass the host file.

  22. Re:LOL: Not hard to understand YOURS you mean by bouldin · · Score: 1

    So, when someone discovers a zero-day vulnerability, it's just "hypothetical bullshit" because nobody has exploited it "mainstream malware?"

  23. Re:Last I say: YOU were asked to show me by bouldin · · Score: 1

    Know why no malware needs to do its own DNS lookups?

    Because nobody uses hosts files for security. I read somewhere that they can be defeated with 4 lines of unprivileged python.

  24. Re:Unbelievable: WRONG again... apk by bouldin · · Score: 1

    * Same ones I crushed that wannabe raymorris with here http://it.slashdot.org/comment... and their DIRECT comments on hosts are shown there, not just their names (as I did here since /. now limits AC post lengths).

    Haha, besides the hilarious posts where you pretend to be someone else congratulating yourself, all I see are people who use hosts files to block ads, which is a good use.

    Oh wait, one guy null routes suspicious traffic! You do know that null routing does not involve hosts files, right? Why is that quote in there?

  25. Re:WRONG again: Spybot S&D anyone? apk by bouldin · · Score: 1

    Want an except from my email where I got NOD32/ESET to remove a FALSE POSITIVE on my ware they had AND Aryeh Goretsky, their LEAD CODER iirc, ADMITTING HOSTS ARE GOOD FOR SECURITY as yet another layer of it?

    Yes, I would like to see those e-mails.

    the guides I put out for securing Windows users espouses "layered-security"/"defense-in-depth" & I was PAID for them no less

    What guides? Links, please.

  26. Re:Spybot S&D uses hosts... apk by bouldin · · Score: 1

    * Lastly, see subject? Ah, but OF COURSE you do Spybot S&D ANYONE? http://it.slashdot.org/comment...

    Show me a link on the Spybot site that says it uses hosts files.

  27. Re:"Eat your words" some more... apk by bouldin · · Score: 1

    Show me a link on the Spybot site that says it uses hosts files.

    Change your diet (eating yer words != good nutrition) http://www.bing.com/search?q=%......

    That's not a link to the Spybot site.

  28. Re:Email excerpt from NOD32/ESET I spoke of... apk by bouldin · · Score: 1

    What guides? Search "HOW TO SECURE Windows 2000/XP" on Google or BING... MOST of them, are mine & got me PAID for them (thus, professional, accepting monies for it) even here http://pcpitstop.com/news/winn... [pcpitstop.com]

    Most of those are yours? I see two were written by Mindy. Is that you?

    Want more? I'll cite Mr. Oliver Day of SECURITYFOCUS a division of Norton/Symantec also IF need be...

    Yes, please cite Mr. Oliver Day.

  29. Re:This is YOU "eating your words" again, lol... a by bouldin · · Score: 1

    I don't see Oliver Day of SecurityFocus on there. Weren't you going to cite him?

    I do see the text:

    Also, in the HELP entry associated with the Hosts File Tool, a sentence begins with: "Spybot-S&D can add a prepared list of web sites known for bad behaviour . . ."

    Which indicates it blocks websites, not command and control servers for botnets.

    Wait a minute, the spybot site is actually https://www.safer-networking.o..., not spybot.info. So, you didn't post a link to the spybot site.

  30. Re:Weasel, you have failed again... apk by bouldin · · Score: 1

    Yeah, sorry, I was blinded by all the verbal diarrhea.

    That article is more than six years old. Got something more recent? He still says it's meant for blocking websites.

  31. Re:Weasel, you have failed again... apk by bouldin · · Score: 2

    Actually, I found a good reference for malware that does perform DNS directly. See page 9 at OpenDNS - DNS Role in Botnets.

    They reference malware using custom DNS servers, and also malware tunneling messages through the DNS protocol.

    Here's a quote:

    At present time, there are few to no effective countermeasures cited by the security community to detect or prevent DNS-based botnet communications. Some larger, security-aware organizations could use techniques such as "split horizon" DNS. This will force internal hosts to send their DNS requests only through the network DNS server.

    So there you go - a network solution. But the malware they mention completely bypasses OS hosts files.

  32. Re:IF you're infected by such a malware? apk by bouldin · · Score: 1

    Did you look at the PDF? The malware speaks DNS protocols directly, bypassing the syscalls that check hosts files. Thats what you asked for earlier.

  33. Re:For everyone's reference by bouldin · · Score: 1

    You said:

    Can "Almost ALL Ads Blocked" do 16 things hosts do for speed, security, & reliability: 1.) Protect vs. malicious sites/servers (beyond malicious ads) 2.) Protect vs. fastflux botnets + stop communique to C&C servers 3.) Protect vs. dynamic dns botnets + stop communique to C&C servers 4.) Protect vs. DGA botnets + stop communique to C&C servers 5.) Protect vs. downed DNS (adds reliability) 6.) Protect vs. DNS redirect poisoned dns 7.) Protect vs. trackers 8.) Protect vs. spam 9.) Protect vs. phish 10.) Protect vs. bandwidth caps 11.) Get you past a dnsbl 12.) Keep you off dns request logs 13.) Speed up websurfing by adblocks & hardcoded fav. sites 14.) Work on ANY webbound app (like stand-alone email programs) multiplatform. 15.) Give you easily texteditor controlled data for the above 16.) Do all that & block ads (better than addons) more efficiently in cpu cycles + memory usage

    Then you said:

    I never SAID (not even once anywhere) hosts "cure all ills"

    lolwut?

    Remember, this whole thread started because I said software can trivially bypass hosts files, and you flipped your shit.

    Hosts files are NOT effective at blocking command&control of botnets. I actually agree with most of the rest of the list, but hosts files are not the silver bullet you make them out to be.

  34. Re:Show me where I say hosts cure all? by bouldin · · Score: 1

    Go for it: BarbaraHudson made that mistake & couldn't do it! You can't either...

    Uh, do what?

    Whoever you referred to is an IMBECILE of the highest order if they don't know that (& I won't look @ a PDF you point to, no way, can't trust what you put out after all your crap I caught you in here consolidated -> http://it.slashdot.org/comment... )

    The PDF I linked is a whitepaper hosted by OpenDNS. You tried to cite OpenDNS earlier as a supporter of hosts files, but they work at the network level.

  35. Re:Dearest illiterate imbecile by bouldin · · Score: 1

    I've apparently smoked your OpenDNS folks too via application based firewalls [...] Not a 1st for me... I've done in the likes of folks from MS (VP of their Windows Client Performance Division, Dr. Mark Russinovich, & others of that ilk...

    Yeah, I'm sure you schooled a PhD in an argument, and understand security better than OpenDNS.

    facepalm

  36. Re:Ask OpenDNS about this... apk by bouldin · · Score: 1

    Haha, real DNS servers don't check /etc/hosts.

    Also, looked like that VP told you "Slashdot anonymous posts are most definitely not the proper channels."

  37. Re:Let's find out from OpenDNS... apk by bouldin · · Score: 1

    Deny what?

  38. Re:"Playing stupid" now, redneck? Ok... apk by bouldin · · Score: 1

    I don't see any discussion at that link, just more verbal diarrhea. Where is Russinovich?

  39. Re:"Doubletalk" stupid = "best ya got"? by bouldin · · Score: 1

    So, you want me to track down a Microsoft executive to debate you anonymously in a Slashdot forum? No.

  40. Re:Knew it, same shit as before by bouldin · · Score: 1

    Thanks for the Windows IT Pro link - it's hilarious! That will make for some great shitter reading later.

    I don't actually see a debate with Russinovich, though. He wrote an article, and you left comments. I don't think he's aware you exist.

    Your apps aren't being used. It's difficult to even find a current download for your garbage while a professional like Dr. Russinovich has a website of his own: http://www.sysinternals.com/

    Oh, you think you schooled the guy who started sysinternals.com? Bahahahhahaa

  41. Re:He's aware I exist ("co-workers") by bouldin · · Score: 1

    Wow, sounds like you're pretty sore at how successful Russinovich is.

  42. Re:If you have to work for your money? by bouldin · · Score: 1

    What's your business?

  43. Re:It's NONE of your business... apk by bouldin · · Score: 1

    Ha, yeah right. If you did, you would have already bragged about it.

  44. Re:I've spoken of it to others... apk by bouldin · · Score: 1

    Are you really in your 50s?

  45. Re:I've spoken of it to others... apk by bouldin · · Score: 1

    I'm actually MORE like "The LORD of Hosts" https://answers.yahoo.com/ques... [yahoo.com] with rank after rank of protective power I can summon @ a word: Hosts!

    I guess you aren't protected from 4 lines of Python, though, huh?

    import dns.resolver

    resolver = dns.resolver.Resolver(configure=False)
    resolver.nameservers = ['8.8.8.8']
    ans = resolver.query('example.com', 'A')

  46. Re:Application Firewalls again...apk by bouldin · · Score: 1

    I guess you aren't protected from 4 lines of Python, though, huh?

    import dns.resolver

    resolver = dns.resolver.Resolver(configure=False)
    resolver.nameservers = ['8.8.8.8']
    ans = resolver.query('example.com', 'A')

    They stop it cold . They'd 1st be able to cut it off running @ all, & secondly, tunneled or not, I'd imagine it travels over IP (TCP or UDP) anyway, or by port, & could easily be stalled... so could communique w/ its rogue DNS + C&C's...

    You seem confused. So are you saying the hosts file would block the DNS request from that Python snippet?

    Heck - Even Windows' native firewall would (does when it doesn't recognize an application & warns you about them - & only a FOOL would let something run they didn't know)... get it? Good.

    Oh, now you're saying the windows firewall would block it. So hosts would not.

  47. Re:Yea, I know: Wanna know why?...apk by bouldin · · Score: 1

    If the windows app firewall is so effective, how are there huge botnets of windows malware?

  48. Re:Ok: Explain this then...apk by bouldin · · Score: 1

    Cool! I hadn't heard of an Android botnet. Is that why the windows firewall doesn't block botnet c&c traffic?

  49. Kaspersky? by MoarSauce123 · · Score: 1

    Mr. K is one of the sauna buddies of Putin...so that makes me wonder which villains he wants to fight and which ones he wants to protect.

  50. Re:Ok: Explain this then...apk by bouldin · · Score: 1

    Windows Firewall can block by IP (TCP/UDP), port, vs. *any* threat really w/ hosts combined with it!

    Yeah! That's how they blocked the Ramnit botnet! OH wait, once that malware is installed it "will disable a series of Windows security features (Windows Defender, Windows Firewall, User Account Control), Windows Update, and remove the ability to install other antivirus software." Windows firewall FTW!

    You've spent HOURS 'scouring the net', days actually, looking for *ANYTHING* you can stooge, to make that "not true"

    Nope, took a 3-minute Google search to find that. Kinda like the Python code that bypasses your hosts file!

  51. Re:Patches & security hardening...apk by bouldin · · Score: 1

    Patches & security hardening...apk

    I KNEW YOU'D TRY THAT CRAP... looking for "edge cases"!

    (... & how did that get in IN THE FIRST PLACE? You didn't mention that a USER HAS TO GET IT FIRST, stupid... things in my security guide using "layered-security"/"defense-in-depth" cuts off those avenues!)

    So.. now you're saying you can block botnets if you use hosts + windows firewall + patches + security hardening + don't run executables + don't plug in USB drives? Hosts FTW! U R rock solid security!

  52. Re:LMAO: My security guide covers those...apk by bouldin · · Score: 1

    YOU PROVIDED THE PEFECT EXAMPLE with your doubtless STOLEN Python code example - UAC + WFP + Windows Firewall cuts those off, detecting them, BEFORE THEY CAN DO DAMAGE, stupid!

    Uh, no, the malware disables all that. When a PC has been infected, the malware will disable a series of Windows security features (Windows Defender, Windows Firewall, User Account Control), Windows Update, and remove the ability to install other antivirus software.

  53. Re:Learn to read: You must catch it 1st... apk by bouldin · · Score: 1

    So.. now you're saying you can block botnets if you use hosts + windows firewall + patches + security hardening + don't run executables + scan USB drives + your "security guide & program" (whatever that means)?

    Hosts FTW! U R rock solid security!

  54. Re:Whatever's in my security guide... apk by bouldin · · Score: 1

    What security guide?

  55. Re:"Playing dumb" again? Learn to read... apk by bouldin · · Score: 1

    Sorry, the link must be buried under verbal diarrhea. Where is it?

  56. Re:Seeing as you can' read... apk by bouldin · · Score: 1

    There aren't any links to security guides in that post - just links to more slashdot comments. Are you embarrassed of your shitty "security guide?"

  57. Re:WoW: You really CAN'T read... apk by bouldin · · Score: 1

    The guide from over 7 years ago for win2000?

    Link is broken. Why did they take it down?

  58. Re:WoW: You're a liar or stupid... apk by bouldin · · Score: 1

    So you don't actually have a security guide?

  59. it's amateur hour by bouldin · · Score: 1

    Yeah, he's a total amateur! He thinks you can block botnet traffic with hosts files! I even showed him some Python that bypasses hosts, but he got really confused.

  60. Re:1st you have to catch it... apk by bouldin · · Score: 1

    My layered security guide stops that & you saw it http://it.slashdot.org/comment...

    I saw the PCpitstop page earlier, but all the guide links were dead then, too.

    It's on multiple sites as stated searching "How to Secure Windows 2000/XP" as you yourself already know liar from your post there in that link above, lol!

    Then it shouldn't be hard for you to find a link to your own paper.

    Hosts don't stop botnets? Ok - they block access to their C&C servers easily also like Zeus -> https://zeustracker.abuse.ch/m... [abuse.ch] easily by host-domain-subdomain names fool...

    Oh really? Hosts files cannot stop DGA botnets. Read the following from Gameover Zeus begins using DGA:

    The Domain Generation Algorithm is a method for a criminal to regain access to his botnet. Based on the current date, random-looking domain names are calculated and the malware reaches out via the Internet to see if that domain exists.

    bmo0ve7lxujkiid9sycsfxb.biz
    borwxz16ctey4fmc99y1t8nw9s.biz
    bttkygongoew1himlrd1889yui.net
    bzi7vw1f0iw5r1qy1pax1sgl3z0.biz
    [...]

    There is a new set of domains every day. For some DGAs, the domains are only up an hour. By the time you find them on a blog somewhere, they are not being used anymore.

    (Yes, we all KNOW IT'S YOU *trying* to "support yourself" via truly unidentifiable anonymous coward 'supporters' Bouldin, lol, & THAT IS HILARIOUS + piss poor 'tactics', moron... totally transparent.)

    Yeah genius, I was making fun of you for doing exactly the same thing. It is hilarious!

  61. Re:Eat your words MENIAL... apk by bouldin · · Score: 1

    Newsflash: if you got paid $100 once, as a prize, you are not a professional.

    You still don't understand malware or botnets. The domain changes more often than you would get updates, so your list is always out of date.

    As I showed you with the Python code, it's trivial to bypass hosts files.

    As I showed you with a previous link, malware (e.g. Ramnit) can disable the firewall and change DNS settings, anyway.

  62. Re:When you get PAID, you're a pro... apk by bouldin · · Score: 1

    See subject: A proof there I have been

    Uh, what? Parse error

    Clue: You won't even SAY WHERE YOU WORK yet YOU CLAIM you are a "security engineer"??? LMAO - No, don't think so.

    Ha, I don't want you harassing me at work, idiot.

    I don't? My ware UPDATES DAILY dimwit (every 12 hours automatically) & more if you do it manually often as you like (every hour if you want, defeating even DGA's stupid) & blocking them, ala:

    You can run your update as often as you like, but malware reverse engineers are not providing you an up-to-the-minute list of all DGA domains. Even if they did, you wouldn't get the domains until the malware had already connected up for its C&C of the hour. Hosts files are a bad strategy for modern botnets because techniques like DGA were designed to defeat static blocklists.

    That's why real antimalware vendors like Damballa don't rely on a static DNS blocklist, much less a hosts file on the OS.

    YOU SAYING THAT WON'T BLOCK A DGA ENDPOINT or C&C? Wrong... hosts block *ANY* host-domain/subdomain name! ANSWER THAT SIMPLE QUESTION!

    I already answered this question - NO. You didn't believe me and called it "hypothetical bullshit," so I provided 4 lines of Python that trivially bypass hosts files.

    You can't corrupt bypass my hosts file by the way.

    Another parse error, but yes, malware can trivially disable your hosts file or the windows firewall.

    Again: DID I SAY HOSTS STOP EVERYTHING? Never. Show me WHERE I HAVE ok? I never have once. Nothing by itself does.

    You keep claiming hosts files stop botnet communication, which is clearly not true.

    I've proven I have TONS OF GUIDES FOR THAT even PAID FOR ONES I WROTE that actually work (with testimonials too)

    No, you provided one dead link that may have hosted 1 guide 7 years ago. And that was a site for AMATEURS to submit their text files, and win a $100 prize if their amateurish text files were accepted.

  63. Re:Projecting what YOU'd do? Yes... apk by bouldin · · Score: 1

    You still have not responded to this:

    You can run your update as often as you like, but malware reverse engineers are not providing you an up-to-the-minute list of all DGA domains. Even if they did, you wouldn't get the domains until the malware had already connected up for its C&C of the hour. Hosts files are a bad strategy for modern botnets because techniques like DGA were designed to defeat static blocklists.

    Perhaps because you are an amateur, and don't understand malware, security, botnets, or anything beyond Pascal on Windows 2000?

    "yes, malware can trivially disable your hosts file or the windows firewall." by bouldin (828821) on Sunday May 24, 2015 @09:15AM (#49763123)

    Not if you secure yourself vs. their methods of getting in which my guide does (cuts off all avenues) first.

    So.. hosts file means strong security as long as you never get an infection in the first place? Surely you realize how stupid that sounds.

  64. Re:When you get PAID, you're a pro... apk by bouldin · · Score: 1

    Bouldin omits apk's 21 yr career in security != dumb selective quoting. Apk's been there and done that at levels I now suspect you can't touch. Are you even over 21? You'd have to be at least that and more to be a pro with 21 yrs to your credit in security as apk has. Are you really a security pro? Prove it. That's all I want to see now. How old are you? I doubt you've been a security pro at all much less one that has a 21 yr career as apk has on levels in coding and networking.

    First off, we know this is you, Kowalrus.

    Second, no, you do not have a 21 year career in security. You have a 15 year career of being a total asshole in internet forums.

    You really have not proven that you've ever had a job, although it does seem likely you worked at Sunbelt but were fired because everybody hates working with you.

  65. Re:Time for YOU to respond... apk by bouldin · · Score: 1

    You still have not responded to this:

    You can run your update as often as you like, but malware reverse engineers are not providing you an up-to-the-minute list of all DGA domains. Even if they did, you wouldn't get the domains until the malware had already connected up for its C&C of the hour. Hosts files are a bad strategy for modern botnets because techniques like DGA were designed to defeat static blocklists.

    And you keep insisting you have a multi-decade security background, but all you have to show for it is a file manager written in Pascal:

    I.E. - I have a 21 yr. long career in security for database work as a pro + a guide for layered security for people that need it: Amateurs mostly need it, not pros.

    And you keep citing your guide, which is from the "tips n tricks" section of a newsletter, but the guide is not up anymore. Apparently they didn't think it was worth much.

    http://forums.pcpitstop.com/in... [pcpitstop.com]

    See that guide, it does that!

    Misquoting me AGAIN? LEARN TO READ! What's in my LAYERED SECURITY GUIDE DOES blocks infestation vectors! It shows how to cut off the sources of infestation & firewalls + hosts (which security pros GALORE backed me on vs. your bs, fool) do the rest even stopping infected systems from "talking back" to their C&C controllers (think Iron Man in Avengers 1 killing the central command in the black hole).

    I have yet to see a security guide, just a dead link.

  66. Re:Why'd you avoid my questions? LOL!... apk by bouldin · · Score: 1

    You still have not responded to this:

    You can run your update as often as you like, but malware reverse engineers are not providing you an up-to-the-minute list of all DGA domains. Even if they did, you wouldn't get the domains until the malware had already connected up for its C&C of the hour. Hosts files are a bad strategy for modern botnets because techniques like DGA were designed to defeat static blocklists.

    No, I have repeatedly: My layered security guide addresses it which you can easily read since you ADMIT seeing various sources to it here http://it.slashdot.org/comment... since WHEN YOU BLOCK AVENUES MALWARES USE TO GET INTO YOU, THEY CAN'T INFECT YOU: Pure truth.

    So, then, you are admitting the hosts file is not effective at blocking botnet c&c channels. Take that out of your list of extravagant claims of the benefits of hosts files.

    Uhm, I never wrote a FileManager 1st of all, lol, & secondly? Again:

    Yeah, you wrote a file manager in Pascal.

    By the way: As a professional software engineer since 1994 here, DB security IS part of the job. To be that job title, you also HAVE to be a network admin with FULL rights to do it. Security IS a HUGE part of it, dumbass (talking out your ass again as usual). I've also taken jobs as a techie before that killing viruses by the MANY 1,000's for clients (using ProcessExplorer & a Windows Install CD recovery console alone even, not needing anything more, even rootkits), & as a network admin/engineer too before graduating to MIS/IS/IT level coding.

    Sounds like you've washed out of every job you've had. It's funny, because if I google your name, all I find is you pissing off people in Internet forums over the past 9 years. Repeatedly.

    P.S.=> You are NOT in my league. Nor will you ever be. Answer these questions in my ps here to prove otherwise -> http://slashdot.org/comments.p... [slashdot.org]

    Hahhaa.. no, I'm not going to give my personal details to some mental patient on the Internet. Let's just say I moved past Pascal when I was in high school.

    I made my monies, doing well enough to NOT have to work anymore in fact (it's great, early retirement)

    Uh no, you are not independently wealthy. You are unemployable. If you apply for a job, the employer will google you and see you are a total whack job who needs medication.

  67. Re:Trying to put words in my mouth.. apk by bouldin · · Score: 1

    So, then, you are admitting the hosts file is not effective at blocking botnet c&c channels. Take that out of your list of extravagant claims of the benefits of hosts files.

    How many times is a dumbshit like YOU going to *try* pull that on me, menial? Are there hostnames here that are still online?? Yes, ZEUS botnet (as a SINGLE example) https://zeustracker.abuse.ch/m...

    If your approach only blocks 5-10% of domain names, then it is NOT effective for security. This might fly in your shareware consumer world, but that is not enterprise-grade.

    Any OTHER kind, such as the edge case RARE types you noted (out of 'desperation') MY SECURITY GUIDE catches via Layered Security/Defense in Depth practices -> http://forums.pcpitstop.com/in...

    You DO NOT HAVE A SECURITY GUIDE. I actually looked for it, and the closest I could find was where you posted it, but everybody thought you were an idiot and banned you. Not what I would call "success."

    "Sounds like you've washed out of every job you've had."

    Wouldn't matter, since if YOU are 'state of the art' in "security engineers" (allegedly)? You suck...

    Yeah, you have totally washed out of every job you had, and now you've been an author of (shitty) shareware. Found this gem:

    IpTables, iirc, = the LINUX modern evolution of the older IPChains system, right?? I am more of a Win32 guy the past few years though, so I must ask.

    So you don't even understand UNIX. You are quite the security professional.

    When I FRY weasels like YOU on a forums as I have here? Sure, they get pissed & have to 'kick me'...

    You have been banned from almost every forum you've ever joined. Like when you were banned in 2000 from arstechnica, and rejoined as a different name to defend yourself. Or when you were banned after trying to spam your shitty security guide in 2007.

    The best thing I could find anyone say about you, from a friend, was:

    Vortac said:

    The only thing I don't like about him (although I've gotten over it), is he thinks everyone is an idiot. He just hasn't had any real experience, deadlines to meet, or being a team player within an organization.

    And the worst thing is, you're a really shitty programmer!

    For my Hosts Engine, I chose Object Pascal since it's beaten even MSVC++ in strings work which my app does HEAVILY - dumb thing for you to say:

    Funny, because you got called out for very poorly performing code (that just sorted some strings and took 11 minutes) here. And here are the kinds of things people said about your code a few years ago:

    Man with no head wrote:

    Of course spamming forums with publicity ads is kind of lame; don't take it personally, but you brought it upon yourself.

    Now as regarding the actual package, I find the UI kind of weird and you don't seem to be following Windows UI guidelines (That's a no-no in Tog speak).

    The feature set is kind of questionable; I fail to see the real value of your product really.

    And to finish my rant, I got these errors on startup on my Win2k SRV SP1 system.

    BTW

  68. Re:Bouldin's "GREATEST HITS" top 10, lol... apk by bouldin · · Score: 1

    Now you see why I've referred to you as a parade of delusion. You're a total fuckup imagining ways that someone you know nothing about has failed.

    Your amateurish security guide sucked, you don't know anything about security, and you're a windows luser. You write shitty freeware in Pascal, and you have no job. You've been caught in lie after lie, and frankly, everybody you have ever known hates you.

  69. Re:Bouldin's "GREATEST HITS" top 10, lol... apk by bouldin · · Score: 1

    Do you seriously think anybody believes this isn't you? Or are you really that fucked up in the head that you have multiple personalities?

  70. Re:Your "greatest hits" QUOTING you != delusion by bouldin · · Score: 1

    Ha, you can keep reposting that list, but none of those are failures on my part, and half of it doesn't even involve me in any way.

    You, on the other hand are a total failure and liar. You claimed you quit Sunbelt, but actually you were fired. You claim to be independently wealthy, but you have a $100,000 house that your mom gave you.

    You've been banned from dozens of sites (in other words, dozens of failures), and each time try ridiculous arguments that everyone on the site shuts down (so let's just call that several hundred failures).

    And now, you are a complete failure because you write super shitty software that is slow. You don't understand computing or security.

    Go back to school. Go to a real school this time.

  71. Re:Reduced to illogical ad hominem attacks again? by bouldin · · Score: 1

    Everyone believes you said this quoted:

    "Because nobody uses hosts files for security" - by bouldin (828821) on Thursday May 21, 2015 @05:53PM (#49746865)

    Haha, yeah, nobody in enterprise does use hosts files for security. That's some consumer-grade shareware shit.

    Spybot doesn't even seem to think it's a good feature, because you haven't been able to link anywhere other than that forum where they even admit having the feature.

    Anyone can use it + see they do & MANY use that program stupid!

    You can keep your consumer-grade shareware/freeware. Enterprise uses solutions like Damballa.

    YOU ALSO TRIED TO DENY it & it's there in PLAIN Black & White with his NAME on it!

    Didn't see it - it was buried under your verbal diarrhea. As many others have noted, your English is terrible.

    WHOSE INITIALS ARE ON THIS - WINNER IN 2008 (added proof of paid for good layered security article):

    Congrats, you got $100 seven years ago. You're a real pro!

    Via the layered security/defense in depth methods my security guide extolls? I've COMPLETELY shut down your "desperation" RARE edge cases you tried too!

    You didn't even understand the cases I presented. And they aren't edge cases, they are malware with millions of infections. But that was lost on you, because you don't understand anything.

  72. Re:Your "greatest hits" QUOTING you != delusion by bouldin · · Score: 1

    You don't understand security or computing, Kowalrus.

  73. Re:ESET/NOD32 anyone? Enterprises use it... apk by bouldin · · Score: 1

    Hey nice copy-paste. So why did you lie about being independently wealthy? Why didn't you just say your mom gave you your house?

  74. Re:ESET/NOD32 anyone? Enterprises use it... apk by bouldin · · Score: 1

    Hey, what do you know? Even malwarebytes thinks your program is just a file manager:

    APK Hosts File Engine - Small program for managing the HOSTS file

    So your one claim to fame IS a file manager written in Pascal. For which nobody pays you.

  75. Re:Get it right, lol: Explorer.exe/winfile.exe by bouldin · · Score: 1

    APK In a Nutshell (A Life of Failure)
    1. Got a mediocre degree in IT. No computer science degree.
    2. Fired from Sunbelt in 2000. Never found full-time employment again, much less as a software engineer.
    3. Mom gave him a house. He lied about it, and claimed to be independently wealthy.
    4. 2000 - Banned from Arstechnica. Rejoined under another name (lied) to argue for himself. Everyone there hated him.
    5. 2003 - Tried to argue with Russinovich in forums of Russinovich's blog. Other forum posters schooled him. Nevertheless, claims he beat Russinovich in argument that Russinovich did not realized happened.
    6. 2007 - Banned from Antionline. Everyone there hated him. Pasted his "security guide," which everyone agreed was not good.
    7. 2008 - Actually got paid $100 for his security guide, and 7 years later claims he's a "security professional."
    8. 2008 - Admitted he doesn't understand UNIX: "I am more of a Win32 guy the past few years though, so I must ask [what iptables is]."
    9. 2008 - Made legal threats against Thor Schrock, but turned out to be lying. Embarrassed publicly by Schrock.
    10. 2010 - Wrote a crappy file manager in Pascal that performs terribly. Nobody would pay for it.
    11. Managed to get malwarebytes to host his file manager because it's free. Lied and denied it's just a file manager, but Malwarebytes calls it what it is: a file manager.
    12. 2011 - BarbaraHudson caught him in a lie - that he had plenty of +5 modded posts on slashdot. They were all at -1.
    13. 2011 - Attempted to re-add garbage to Wikipedia 20 times on the hosts file. Had it removed each time.
    14. 2012 - Embarrassed on slashdot for his text file manager's extremely poor performance. Pastes Python but fails to indent, showing he does not understand the basics of Python.
    15. 2014 - Zontar schooled him, doxed him, caught him in several other lies.
    16. 2014-2015 - Bouldin repeatedly explained why hosts files are not suitable security against botnets, but he didn't understand the technical aspects. Seems very confused about basic networking and how malware works. Refers to malware with millions of infections as "edge cases." Doesn't understand basic Python, and believes the hosts file cannot be bypassed even after proof otherwise.
    17. Still has not done anything since his long-since-deleted security guide from 2007 or his file manager from 2010.

  76. Re:Putting away your Ad Hominem attacks... apk by bouldin · · Score: 1

    Enough to buy a house from Dad (not ma)

    Funny, the tax assessor said she sold it to you in 2010 for $1. So I guess you were actually just living at mom's house until 2010, when she gave it to you.

    UNIX & VMS here.

    Just cause you said it doesn't make it true. Your internet history shows otherwise - a windows luser.

  77. Re:You don't own a home evidently, renter by bouldin · · Score: 1

    Ever bought real estate? It's possible to do that for tax purposes from relative & 1 time gift stuff etc.- et al. IS that what was PAID though? You must wonder (houses worth 100k + land around it worth more too I paid for but helped Dad). Taxes, taxes, taxes & capital GAINS are key.

    You really are condescending. That's (part of) why nobody likes you.

    The $1 sales price means the house was a gift. If you actually handed over more money than that (doubtful), then you committed fraud.

    I knew you were stupid, but not so stupid to RENT, which evidently you do still, lol!

    Ha, yeah, nice try.

    (I do, 2 of them, AS in CS + BS in MIS

    Assocates in CS is meaningless. You don't get into real CS classes until Junior year. This means you have a BS in MIS (a circa 80's degree, at that).

    ... where I was also a lettering NCAA athlete 1st string no less for a many time national or divisional champ... how about you, creampuff? No?? Didn't think so!)

    Congrats. But then you started smoking, and now you sit around playing Diablo all day.

    All you have now is arstechnica lies I long ago disproved in the post parent to yours... all done now?

    Disproved? I read the posts. People criticized your shitty software, and you flew off the handle and got banned for it. You made a lot of enemies there. By the way, I noticed someone started a petition to have you killed in 2006. According to the archive.org page, it got at least 29 signatures. So, congrats on that, too!

    Uhm, call LeMoyne's CS dept, & computer center. It was VAX 1180 during my time @ LeMoyne 1984-1987.

    Even if you had gotten a CS degree (you didn't), that was a way shitty school that actually disbanded the CS department from 1994 - 2008.

  78. Kowalrus in a Nutshell by bouldin · · Score: 1

    Illogical? Only if you don't understand logic. Since you never took logic classes, you probably don't.

    Here, I updated your timeline:

    Alex Kowalrus In a Nutshell (A Life of Failure)
    0. Birthday was January 31st (see below).
    1. 198x - Got a mediocre degree in IT from LeMoyne University. No computer science degree. LeMoyne actually disbanded their CS department from 1994 - 2008.
    2. Fired from Sunbelt in 2000. Never found full-time employment again, much less as a software engineer. Moved back in with mom in Syracuse.
    3. 2000 - Banned from Arstechnica. Rejoined under another name (lied) to argue for himself.
    4. 2003 - Tried to argue with Dr. Russinovich (of sysinternals.com) in comments below Russinovich's blog. Other forum posters schooled him. Nevertheless, he still claims he beat Russinovich in an argument that Russinovich did not realized happened.
    5. 2006 - Someone opened petition on petitiononline.com to have APK put to death. It got (at least) 29 signatures.
    6. 2007 - Banned from Antionline.com. Everyone there hated him. Copy/pasted his "security guide," which everyone agreed was not good.
    7. 2008 - Actually got paid $100 for his security guide as a newsletter prize, and thus claims, to this day, that he's a "security professional."
    8. 2008 - Admitted he doesn't understand UNIX: "I am more of a Win32 guy the past few years though, so I must ask [what iptables is]."
    9. 2008 - Made legal threats against Thor Schrock, but turned out to be bluffing. Embarrassed publicly by Schrock.
    10. 2010 - Mom gave him the house (worth $100,000, counting land). He currently lies about that, claiming to be independently wealthy.
    11. 2010 - Wrote a crappy file manager in Pascal that performs terribly. Nobody would pay for it.
    12. Managed to get malwarebytes to host his file manager because it's free. Lied and denied it's just a file manager, but Malwarebytes calls it what it is: a "Small program for managing the hosts file"
    13. 2011 - BarbaraHudson caught him in a lie - that he had plenty of +5 modded posts on slashdot. They were all at -1.
    14. 2011 - Attempted to re-add garbage to Wikipedia 20 times on the Windows hosts file. Had it removed each time. Complained in the editorial pages, but was shot down.
    15. 2012 - Embarrassed on slashdot for his text file manager's extremely poor performance (11 minutes to sort 1.8 million strings). Currently claims he "chose" Python because C++ does not perform as well. Pasted Python but failed to indent lines, showing he did not understand the basics of Python.

  79. continued by bouldin · · Score: 1

    16. 2014 - Zontar schooled him, doxed him, caught him in several other lies.
    17. 2014-2015 - Bouldin repeatedly explained why OS hosts files are not suitable security against botnets, but Kowalrus didn't understand the technical aspects. Currently seems very confused about basic networking and how malware works. Doesn't understand basic Python, and believes the hosts file cannot be bypassed even after seeing Python code that does the bypassing. When provided proof that malware with millions of infections (Ramnit, Gameover Zeus) can bypass the hosts file (and other OS protection mechanisms), he called the malware "edge cases."
    18. Still has not done anything since his long-since-deleted security guide from 2007 or his text file manager from 2010. Declares victory over everyone on every forum he has ever visited. Currently has no friends.

    Other events on Jan 31st:
    * Guy Fawkes was executed.
    * Germany used poison gas at a large scale for the first time in history of warfare.
    * The Soviet Union exiled Leon Trotsky.
    * Harry Truman announced a program to develop the hydrogen bomb.
    * Viet Cong launched the Tet Offensive.

    1. Re:continued by bouldin · · Score: 1

      #owned

  80. Re:Bouldin 10x++ pwned by ME? Yes... apk by bouldin · · Score: 1

    Let me guess. You have some goofy visual basic script to get around Slashdot's lameness filter. You must be proud.

  81. Re:Bouldin 10x++ pwned by ME? Yes... apk by bouldin · · Score: 1

    Alex Kowalrus In a Nutshell (A Life of Failure)
    0. Birthday was January 31st (see below).
    1. 198x - Got a mediocre degree in IT from LeMoyne, but not a computer science degree. LeMoyne U actually disbanded their CS dept from 1994 - 2008.
    2. Fired from Sunbelt in 2000. Never found full-time employment again, much less as a software engineer. Moved back in with mom in Syracuse.
    3. 2000 - Banned from Arstechnica.com, but rejoined under another alias (a lie) to argue for himself. Everyone in the forums hated him.
    4. 2003 - Attempted to argue with Dr. Russinovich (of sysinternals.com) in the comments below Russinovich's blog. Other commenters schooled him, but he still claims he beat Russinovich in an argument that Russinovich did not realized happened.
    5. 2006 - Someone opened a petition on petitiononline.com to have APK put to death. The petition got (at least) 29 signatures.
    6. 2007 - Banned from Antionline.com because everyone there hated him. Posted his "security guide," which everyone agreed was not good.
    7. 2008 - Actually got paid $100 for his security guide as a newsletter prize, and thus claims, to this day, that he's a "security professional."
    8. 2008 - Admitted he doesn't understand UNIX, saying, "I am more of a Win32 guy the past few years though, so I must ask [what iptables is]."
    9. 2008 - Made legal threats against Thor Schrock, but turned out to be bluffing. Embarrassed publicly by Schrock.
    10. 2010 - His mom gave him the house (worth $100,000). He currently lies about that and claims to be independently wealthy.
    11. 2010 - Wrote a buggy file manager in Pascal that performs terribly. Could not find anyone to pay for it.
    12. Managed to get malwarebytes to host his freeware file manager. Currrently lies, denying it's just a file manager, but the Malwarebytes site labels it a "Small program for managing the HOSTS file"
    13. 2011 - BarbaraHudson caught him in a lie - that he had plenty of +5 modded posts on slashdot. They were all at -1.
    14. 2011 - Attempted to re-add garbage about the Windows hosts file to Wikipedia 20 times, but it was removed each time. Tried complaining in the editorial pages, but was shot down.
    15. 2012 - Called out on slashdot for his text file manager's extremely poor performance (11 minutes to sort 1.8 million strings). Ironically claims he "chose" Pascal because it performs better than C++. Pasted Python but failed to indent lines, indicating he did not understand even the basics of Python.

  82. Re:Bouldin 10x++ pwned by ME? Yes... apk by bouldin · · Score: 1

    16. 2014 - Zontar schooled him, doxed him, and caught him in many other lies. People chimed in on Slashdot to call him out on his crazy lies and say they hated him.
    17. 2014-2015 - Bouldin repeatedly explained why OS hosts files do not provide security against botnets, but Kowalrus couldn't understand the technical aspects. Currently seems surprisingly confused about basic networking and how malware works. Cannot read basic Python, and believes the hosts file cannot be bypassed even after seeing Python code that does the bypassing. When given examples of malware with millions of infections (e.g. Ramnit, Gameover Zeus) that can bypass the hosts file (and other OS protection mechanisms), he dismissed the malware as "edge cases."
    18. Still has not done anything since his long-since-deleted security guide from 2007 or his text file manager from 2010. Declares victory over everyone on every forum he has ever visited. Currently has no friends.

    Other events on Jan 31st:
    * Guy Fawkes was hanged, drawn, and quartered.
    * Germany used poison gas at a large scale for the first time in history of warfare.
    * The Soviet Union exiled Leon Trotsky.
    * Harry Truman announced a program to develop the hydrogen bomb.
    * Viet Cong launched the Tet Offensive.

  83. Re:Bouldin 10x++ pwned by ME? Yes... apk by bouldin · · Score: 1

    Anonymous Peter Kowalrus wrote:

    Better than faking you're a jew when you're not and grandma paying your way fool when you indebted yourself so far you'll never get out.

    lolwut

  84. Re:Not I & Bouldin's Golden Top 10 hits... apk by bouldin · · Score: 1

    "Better than faking you're a jew when you're not and grandma paying your way fool when you indebted yourself so far you'll never get out." - Anonymous Peter Kowalrus

  85. In hex, because I know you don't understand that by bouldin · · Score: 1

    Alex Kowalrus In a Nutshell (A Life of Failure)
    0x00. Birthday was January 31st (see below).
    0x01. 198x - Got a mediocre degree in IT from LeMoyne University. No computer science degree. LeMoyne actually disbanded their CS department from 1994 - 2008.
    0x02. Fired from Sunbelt in 2000. Never found full-time employment again, much less as a software engineer. Moved back in with mom in Syracuse.
    0x03. 2000 - Banned from Arstechnica. Rejoined under another name (lied) to argue for himself. Everyone there hated him.
    0x04. 2003 - Attempted to argue with Dr. Russinovich (of sysinternals.com) in the comments below Russinovich's blog. Other commenters schooled him, but he still claims he beat Russinovich in an argument that Russinovich did not realized happened.
    0x05. 2006 - Someone opened petition on petitiononline.com to have APK put to death. It got (at least) 29 signatures.
    0x06. 2007 - Banned from Antionline.com because everyone there hated him. Posted his "security guide," which everyone agreed was not good.
    0x07. 2008 - Actually got paid $100 for his security guide as a newsletter prize, and thus claims, to this day, that he's a "security professional."
    0x08. 2008 - Admitted he doesn't understand UNIX, saying, "I am more of a Win32 guy the past few years though, so I must ask [what iptables is]."
    0x09. 2008 - Made legal threats against Thor Schrock. Backed down, and was publicly embarrassed by Schrock.
    0x0A. 2010 - His mom gave him the house (worth $100,000). He currently lies about that and claims to be independently wealthy.
    0x0B. 2010 - Wrote a buggy file manager in Pascal that performs terribly. Could not find anyone to pay for it.
    0x0C. Managed to get malwarebytes to host his file manager because it's free. Lied and denied it's just a file manager, but Malwarebytes calls it what it is: a "Small program for managing the HOSTS file"
    0x0D. 2011 - BarbaraHudson caught him in a lie - that he had plenty of +5 modded posts on slashdot. They were all at -1.
    0x0E. 2011 - Attempted to re-add garbage to Wikipedia 20 times on the Windows hosts file. Had it removed each time. Complained in the editorial pages, but was shot down.

  86. Re:In hex, because I know you don't understand tha by bouldin · · Score: 1

    0x0F. 2012 - Called out on slashdot for his text file manager's extremely poor performance (11 minutes to sort 1.8 million strings). Ironically claims he "chose" Pascal because it performs better than C++. Pasted Python but failed to indent lines, indicating he did not understand even the basics of Python. 0x10. 2014 - Zontar schooled him, doxed him, caught him in several other lies. People chimed in on Slashdot to say they hated him. 0x11. 2014-2015 - Bouldin repeatedly explained why OS hosts files are not suitable security against botnets, but Kowalrus didn't understand the technical aspects. Currently seems very confused about basic networking and how malware works. Doesn't understand basic Python, and believes the hosts file cannot be bypassed even after seeing Python code that does the bypassing. When provided proof that malware with millions of infections (Ramnit, Gameover Zeus) can bypass the hosts file (and other OS protection mechanisms), he called the malware "edge cases." 0x12. Still has not accomplished anything since his long-since-deleted "security guide" from 2007 or his text file manager from 2010. Nevertheless, he declares victory over everyone, on every forum he has ever visited. Has no friends. Other events on Jan 31st: * Guy Fawkes was hanged, drawn, and quartered. * Germany used poison gas at a large scale for the first time in history of warfare. * The Soviet Union exiled Leon Trotsky. * Harry Truman announced a program to develop the hydrogen bomb. * Viet Cong launched the Tet Offensive.

  87. APK - a life of failure by bouldin · · Score: 1

    0x0F. 2012 - Called out on slashdot for his text file manager's extremely poor performance (11 minutes to sort 1.8 million strings). Ironically claims he "chose" Pascal because it performs better than C++. Pasted Python but failed to indent lines, indicating he did not understand even the basics of Python.
    0x10. 2014 - Zontar schooled him, doxed him, caught him in several other lies. People chimed in on Slashdot to say they hated him.
    0x11. 2014-2015 - Bouldin repeatedly explained why OS hosts files are not suitable security against botnets, but Kowalrus didn't understand the technical aspects. Currently seems very confused about basic networking and how malware works. Doesn't understand basic Python, and believes the hosts file cannot be bypassed even after seeing Python code that does the bypassing. When provided proof that malware with millions of infections (Ramnit, Gameover Zeus) can bypass the hosts file (and other OS protection mechanisms), he called the malware "edge cases."
    0x12. Still has not accomplished anything since his long-since-deleted "security guide" from 2007 or his text file manager from 2010. Nevertheless, he declares victory over everyone, on every forum he has ever visited. Has no friends.

    Other events on Jan 31st:
    * Guy Fawkes was hanged, drawn, and quartered.
    * Germany used poison gas at a large scale for the first time in history of warfare.
    * The Soviet Union exiled Leon Trotsky.
    * Harry Truman announced a program to develop the hydrogen bomb.
    * Viet Cong launched the Tet Offensive.