EH-Net

Resources => News from the Outside World => Topic started by: Ketchup on August 27, 2010, 01:50:58 PM



Title: Hackers accidentally give Microsoft their code
Post by: Ketchup on August 27, 2010, 01:50:58 PM
Quote
When hackers crash their systems while developing viruses, the code is often sent directly to Microsoft, according to one of its senior security architects, Rocky Heckman.

http://www.zdnet.com.au/hackers-accidentally-give-microsoft-their-code-339305548.htm?omnRef=http%3A%2F%2Fslashdot.org%2F (http://www.zdnet.com.au/hackers-accidentally-give-microsoft-their-code-339305548.htm?omnRef=http%3A%2F%2Fslashdot.org%2F)


Title: Re: Hackers accidentally give Microsoft their code
Post by: H1t M0nk3y on August 27, 2010, 02:07:20 PM
Quote
When the hacker's system crashes in Windows, as with all typical Windows crashes, Heckman said the user would be prompted to send the error details — including the malicious code — to Microsoft. The funny thing is that many say yes

So funny!  :D



Quote
Heckman said that developers should consider all data input by a user as harmful until proven otherwise.

This is sooo true!!!


Title: Re: Hackers accidentally give Microsoft their code
Post by: charliemong on September 03, 2010, 05:56:58 AM
Very funny.

"The first thing [script kiddies] do is fire off all these attacks at Microsoft.com," he said. "On average we get attacked between 7000 and 9000 times per second at Microsoft.com," said the senior security architect.

This would explain why there website is so slow then?


Title: Re: Hackers accidentally give Microsoft their code
Post by: MaXe on September 03, 2010, 06:27:16 AM
Quote
When the hacker's system crashes in Windows, as with all typical Windows crashes, Heckman said the user would be prompted to send the error details — including the malicious code — to Microsoft. The funny thing is that many say yes

So funny!  :D

I found that funny as well, though at least not all "hackers" including blackhats (and many other hats) do that mistake.

I'm not a blackhat but when I've had to develop bypassing techniques for AV-scanners, I made sure that my work was not automatically sent to M$ nor the Anti-Virus manufacturer.

Else it's pretty much worthless work, which I assume most of us are not fond of  ;)

If you wonder exactly what those bypassing techniques are used for, it's for demonstration purposes to compare how hard or easy it may be to bypass different Anti-Virus systems. (The entire system, that is.)