RE: [Asrg] Zombie spam

[Bill Cole <grsa at billmail.scconsult.com>]

At 5:05 AM -0700 7/22/04, Hallam-Baker, Phillip  imposed structure on 
a stream of electrons, yielding:
> >  That wasn't the issue that I took up with Phillip.  I took
> >  issue when he
> >  claimed that Anti-virus solutions don't work (even when
> >  implemented) and
>
> I said repeatedly that they do not work when people do not
> implement them which is close to a tautology.
>
> I was just speaking to an analyst who said that only a quarter
> of PCs have any form of anti-virus protection of any kind. The
> proportion that have up to date signatures is much less.

Beyond that problem, it is my experience and that of many others that 
even good AV implementation in controlled populations (i.e. corporate 
networks) is far from perfect and the edge cases are enough to make 
constant vigilance and firefighting necessary. The problem comes from 
putting a badly designed and coded OS with badly designed and coded 
applications in the hands of users who cannot be expected to 
understand what they are using well enough to keep it secure.

> > From a public health perspective we have to drain the malaria
> ponds.

Not a bad analogy. Unfortunately there are people who make arguments 
analogous to defending the important wetland habitats of mosquito 
species that depend on stagnant pools.


--
Bill Cole
bill at scconsult.com


_______________________________________________
Asrg mailing list
Asrg at ietf.org
https://www1.ietf.org/mailman/listinfo/asrg