A Conference For Malware Writers 112
tsu doh nimh writes "There is a security conference being held in Mumbai later this year called MalCon, and the organizers say it's the first ever conference dedicated to the 'malcoder community.' Brian Krebs interviewed one of them and got this gem: 'Just like the concept of "ethical hacking" has helped organizations to see that hackers are not all that bad, it is time to accept that "ethical malcoding" is required to research, identify and mitigate newer malwares in a "proactive" way.' Bruce Schneier is speaking at a sister MalCon event in Pune, India two days later, and he said he doesn't agree with the organizer's premise that more malware is needed to build better security tools."
What could possibly go wrong? (Score:1, Insightful)
What could possibly go wrong?
Re: (Score:3, Funny)
Microsoft will doubtless send an engineer so that the malware authors can reserve the bandwidth they need for all those coredumps mentioned earlier.
Re:What could possibly go wrong? (Score:4, Informative)
No amount of malware can ever drain as much performance as Norton Antivirus.
Re: (Score:2)
No amount of malware can ever drain as much performance as Norton Antivirus.
No malware can suck the life, soul or mind out of you like PowerPoint.
Re: (Score:2, Insightful)
Re: (Score:2)
I doubt as sponsors, more as participants.
Re: (Score:2)
Re: (Score:3, Insightful)
Malware does automatic updates and upgrades.
Re: (Score:3, Funny)
Re: (Score:1)
Re: (Score:1)
No amount of malware can ever drain as much performance as Norton Antivirus.
That's the point - install Norton Antivirus and malware will instantly stop bothering you!
Re: (Score:2)
That's clever! Make the computer sufficiently slow that the malware doesn't find it worth bothering.
I hadn't though of that. I guess I'll have to stop complaining about Norton now.
Re: (Score:2)
No amount of malware can ever drain as much performance as Norton Antivirus.
Comment .... Of .... The .... Week ....
Re: (Score:2)
Don't say things like that - you'll only encourage them. Both the malware authors and Norton - both aspiring to new depths of reduced performance.
Too late ; you said it. Just shoulder the blame and follow the rest of the scapegoats over the cliff edge.
Re: (Score:2)
I'm running Windows Vista, installed a few years ago (very soon after Vista was released), no auto updates, disabled security that I could, always turn off defender at boot, running in administator account, no anti-virus. I'm not anal about the sites I visit - however I never run anything from a source I don't trust at least a bit.
No viruses, no slowdown. I've just moved my PC, but prior to that it was at over a month uptime (I know I should probably turn it off when I'm at work, but I'm lazy).
The myth ab
Re: (Score:2)
I'm running Windows Vista, installed a few years ago (very soon after Vista was released), no auto updates, disabled security that I could, always turn off defender at boot, running in administator account, no anti-virus. I'm not anal about the sites I visit - however I never run anything from a source I don't trust at least a bit.
No viruses, no slowdown. I've just moved my PC, but prior to that it was at over a month uptime (I know I should probably turn it off when I'm at work, but I'm lazy).
The myth about Windows installs necessarily degenerating and being inherently liable to viruses has to get squished soon - it does nothing for Linux. The users who you are trying to switch over will install any old thing whatever OS they are using.
ps. I just bought a new HD to install Linux on on my computer, I'll probably go Slackware since it's what I'm most familiar with. One of the reasons I'm not running Linux yet is because the fakeraid implementation was pretty technical when I got this computer, and I didn't want to jump right in and hose the partition (which is what the Ubuntu installer suggested... fortunately I knew enough about my system partitioning to not allow it to do that).
So you run with no firewall? No UAC? Geez. You might as leave the door wide open and put a light on. Sure the security of Windows isn't the best ever, but I've found that some is certainly better than nothing. I mean do you use flash? You know that there are like a million exploits right there right? And with no anti-virus scanner or anything, how would you even know if you were infected?
Re: (Score:2)
I run with nothing protecting me... Remote exploits which do not require user interaction are very rare, especially if you don't run Internet Explorer, I generally run open source applications and/or small 3rd party applications.
I've been following the same policy for 10 years or so, and have had _one_ virus infection that got through, when I was running win2k. It screwed up literally about 3 files,and took about an hout to clean.
And with no anti-virus scanner or anything, how would you even know if you w
Re: (Score:2)
Re: (Score:2)
How do you know this? Do you also do online banking from this computer?
Re: (Score:2)
I don't _know_ it. Neither does anyone. Antivirus does nothing against 99% of online bank fraud, which is caused by users being ignorant (I mean that in the true sense).
I don't do any of my banking online at all.
Ohh, can we? can we? can we? (Score:2, Funny)
Can we nuke the site from orbit?
Re: (Score:2)
Bambam, this is Grover.
Grover, this is Bambam.
Bambam, this is Grover. Request, orbital strike, thermonuclear payload, TRP Malcon.
Grover, this is Bambam, send nuclear authorization codes.
Bambam, this is Grover, authorization code follows, "kill it with fire."
Shot over.
Shout out.
Splash over.
Splash out.
Bambam, this is Grover, fire for effect.
Car Bomb (Score:3, Insightful)
If ever a car bomb was an appropriate response to anything, this is it.
Re: (Score:2)
Can we nuke the site from orbit?
How is this remotely a troll? This is the best idea I've heard all day!
Re: (Score:1)
Re: (Score:2)
Can't say I have. :)
Re: (Score:1)
Not the new movie though, I personally didn't care for it much.
Re: (Score:2)
I'll have to check it out.
All our rotten eggs in one basket... (Score:5, Funny)
Take off and nuke the site from Orbit. It's the only way to be sure.
Re:All our rotten eggs in one basket... (Score:4, Insightful)
That won't work. Malware is an ecological/economic niche, and someone(s) or something will fill it.
Re:All our rotten eggs in one basket... (Score:4, Funny)
That won't work. Malware is an ecological/economic niche, and someone(s) or something will fill it.
Perhaps you are right, but nuking from orbit would be a significant deterrent. Besides, this could become an annual event. Having a contractor like Blackwater nuke it annually would open new jobs for malware enthusiasts each year. There would be construction jobs to rebuild the convention site. Just think of the economic impact! Additionally, it could serve as a method of population control. /s
Re: (Score:2, Funny)
Re: (Score:1)
I was thinking of the exact same quote when I read this....
Re: (Score:1, Offtopic)
Bad analogy is bad (Score:4, Insightful)
Re: (Score:1)
Re: (Score:2)
best way to make cars safer is to hire people to randomly sabotage people's cars
Re: (Score:2, Offtopic)
Re: (Score:1)
god damn fucking boo!
give this fucking meme a rest
Re: (Score:1, Redundant)
Re: (Score:3, Insightful)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Then it's a good thing you don't have points (and possibly the reason why).
If you disagree, rebut the argument with evidence and reason. Modding people down for being wrong (in your opinion) is childish and, most important of all, unpersuasive.
Re: (Score:2)
Re: (Score:2)
Re: (Score:1)
We need to take perfectly good cars and figure out ways to intentionally crash them under test conditions, so manufacturers know what works and what doesn't under controlled conditions and have the opportunity to determine points of failure and how to work around them.
Re: (Score:1)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
We need to create new, more virulent biological weapons to improve medicine.
Actually, the government has active biowarfare labs churning out new and more virulent bugs specifically so they can create new vaccines and targeted drugs.
Every now and then they discover something that is useful outside the field of biochem weapons.
Re: (Score:2)
But yes from time to time there's useful stuff that comes out of it as a pure accident.
Seriously... (Score:5, Insightful)
What's next?
Pedocon: Discussing the tools and tactics of the new generation of pedophiles, to enable parents to better protect their children.
This is genius (Score:4, Funny)
Also, they're having a conference for criminals down at the local police station. Real big conference, trust me. I bet there'll be booth babes.
Re: (Score:3, Funny)
I bet there'll be booth babes.
I'd go for the booth babes at the criminal convention over the malware booth babes...bound to be fewer viruses...
after (Score:2, Funny)
They should give out free promotional USB memory devices! 100pts. for every attendee you get saying 'Let's see what's on this... oh... what an idiot...!' and facepalming/bursting into flames.
It's a trap! (Score:1)
Re: (Score:2)
You'd think that if anyone were going to know better than to accept an invitation from a dethroned Nigerian prince to join him on a luxury vacation in the exotic east, it would be these guys... :-/
Re: (Score:1)
to teach better tucking
MalCon (Score:5, Funny)
They should hold it outside, under a bunch of large canopies. Then they'd be sure to have a lot of MalCon tents there.
Re: (Score:2)
Participants ante up some money to compete at writing the best (worst?) malware using an interpreted language. The pooled entrance fees would be placed into the Script Kitty for distribution to the winner.
The possibilities are endless.
Re: (Score:1)
Re: (Score:2)
Re: (Score:2)
To prevent this post from being a "+1" let me add the following [eckernet.com].
Ethical Malcoding (Score:5, Insightful)
Ethical Terrorism
Ethical Oppression
Ethical Genocide
Ethical Cannibalism
Ethical Amorality
Maybe they're hoping that by concentrating enough evil in one room, they'll create a black hole of iniquity that will flush these fuckers down a cosmic toilet.
Re: (Score:2)
Ethical Amorality
They give up their scruples so we can have more.
Ethical Cannibalism (Score:2)
There ain't no party like a Donner Party [wikipedia.org].
Seriously, the situations are incredibly rare, but I can see in true crisis situations, someone eating the flesh of another person to survive until they can get help/other sources of food, without morally transgressing. I could see a parent, seeing their family on the verge of starvation, giving of themselves (quite literally), so their children could survive. I think such situations could very well be ethical.
Re: (Score:2)
Re: (Score:1)
It could very well be a way for some agencies to track malware writers, or any newcomers wanting to become the next big malware writer...set up a big FAKE malware convention, have people talk for those who listen, send out proof of concept work using code that is traceable, set up perimeter online to spot any of the same code in the wild, track all ip addresses set up for such activity, and voila, you now have a step up on the bad guys...I also tend to overdo it with watching conspiracy movies!
You leave me no choice but to invoke the power of (Score:2)
... the Toilet of Power [zebragirl.net]!
Yeah, Right (Score:3, Insightful)
Yeah. Like more murders lead to better murder investigations.
Serial Killers (Score:3, Insightful)
Re: (Score:2)
Organizer has impressive credentials* (Score:2)
* http://malcon.org/2010/workshops/MalConMalwareAnalysis2010.pdf [malcon.org]
Re: (Score:2)
Thanks for the heads up... (Score:2)
This is like having a conference for nuke makers (Score:1)
Under the guise of "helping citizens to develop better detection and understanding of Weapons of Mass Destruction"
Surely weapons of mass destruction do less damage, if they're better understood, and more people know about what techniques are need to make them and how to get around pitfalls and difficulties in constructing WMDs, right?
Nigerian Email Conference (Score:2)
If you like this conference, maybe you'll like the Nigerian Email Conference: http://j-walk.com/other/conf/ [j-walk.com]
Meeting in Mumbai, huh? (Score:2)
If only they'd scheduled it 2 years sooner.
Where are terrorists when you need them? (Score:2)
Seriously, that's one place where killing of attendees is a perfectly valid reaction of a sane person.
More car accidents to understand drunk driving (Score:1)
This is insane. Smart people already understand how malware works. This reminds me of Calvin's dad in Calvin and Hobbes saying "____ builds character" no matter what the thing is. Sometimes things are a negative and they're already fully understood that way. That's the way it is.
Bruce Schneier is right here; there is no need for a conference of malware developers.