On Fri, 8 Jun 2001, Ari Weisz-Koves wrote: > that only one person needs to write a really good trojan before thousands > can be using it the next week. And only one person needs to write a good library before thousands can be using it next week. > > I propose just one more argmuent to this debate. We know that someone can > write an extremly nasty trojan and get it out in use quickly, regardless of > what operating system is in use. And like Paul said we're starting to see > more .exe virii around as the skilled virii programmers get more Win32 > savvy. But I believe less people can make these work than can give it a go > with a VBS approach. And surely the anti-virus vendors have a better chance > at keeping up with the game if only a fraction of those capable of writing > virii using kits are capable of writing trojans to use libpcap? I'm not > saying that they can't do it, but if it simple enough to come in a kit then > anyone who feels so inclined can do it. If it requires actually picking up > some books and learning Win32 programming, won't they just go back to > watching MTV? I doubt it- we saw the same growth curve in the DOS virus days, and I can't see a reason we won't see DecryptAndInstallPcap(); or something similar anyway VB isn't _that_ difficult to learn. Paul ----------------------------------------------------------------------------- Paul D. Robertson "My statements in this message are personal opinions proberts@patriot.net which may have no basis whatsoever in fact." - [To unsubscribe, send mail to majordomo@lists.gnac.net with "unsubscribe firewalls" in the body of the message.]