<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body dir="auto">
<div style="-webkit-text-size-adjust: auto;"><span></span></div>
<div>
<div style="-webkit-text-size-adjust: auto;">Hi all,</div>
<div style="-webkit-text-size-adjust: auto;"><br>
</div>
<div style="-webkit-text-size-adjust: auto;">I won't claim to have a definite answer, but here is one concrete example of something that I believe should definitely be avoided.</div>
<div style="-webkit-text-size-adjust: auto;"><br>
</div>
<div style="-webkit-text-size-adjust: auto;">Back in 2001, a whole bunch of people in the antivirus industry signed a petition against teaching how to create computer viruses. The reasoning behind this was, and I quote:</div>
<div style="-webkit-text-size-adjust: auto;"><br>
</div>
<div><strong style="-webkit-text-size-adjust: auto; background-color: rgba(255, 255, 255, 0);">"It is not necessary and it is not useful to write computer viruses to learn how to protect against them."</strong></div>
<div style="-webkit-text-size-adjust: auto;"><br>
</div>
<div style="-webkit-text-size-adjust: auto;"><a href="https://web.archive.org/web/20080511145453/http:/www.avien.org/publicletter.htm">https://web.archive.org/web/20080511145453/http:/www.avien.org/publicletter.htm</a></div>
<div style="-webkit-text-size-adjust: auto;"><br>
</div>
<div style="-webkit-text-size-adjust: auto;">Let's not make this mistake again. Instead, let's have people who know how to attack help design our defenses.</div>
<div style="-webkit-text-size-adjust: auto;"><br>
</div>
<div style="-webkit-text-size-adjust: auto;">Just my 2 cents.</div>
<div style="-webkit-text-size-adjust: auto;"><br>
</div>
<div style="-webkit-text-size-adjust: auto;">Andreas<br>
<br>
</div>
<div style="-webkit-text-size-adjust: auto;"><br>
8 sep 2014 kl. 16:22 skrev "dave aitel" <<a href="mailto:dave@immunityinc.com">dave@immunityinc.com</a>>:<br>
<br>
</div>
<blockquote type="cite" style="-webkit-text-size-adjust: auto;">
<div><span>So I'm heading to a conference shortly and I was going to promote them in this email but they're apparently not a public conference. I'm on a panel called "Identification of Emerging and Evolving Threats" with some non-US Government people who seem
pretty nice.</span><br>
<span></span><br>
<span>Anyways, now that I've guaranteed myself an exciting visit from security services, I wanted to point out the one question everyone should be asking when they go to any conference and a new technology of any kind is proposed as any kind of forward movement
for defense. And that is this: "How can we avoid making the mistake of Anti-Virus" ever again?</span><br>
<span></span><br>
<span>Because much like the Internet has been hamstrung at birth by the parasitic growth of the advertising industry, the information security community has been devastated for almost its entire existence by the dominance of anti-virus companies and products
which demonstrably haven't worked for almost their entire reign, and in theory never could have scaled. They are broken by design. And because they sucked all the money and research and people from the defensive community, no actual defenses were ever created
for IT that had a hope of working.</span><br>
<span></span><br>
<span>So the only question any team of government executives working on defense needs to be thinking about is "How is this different from Anti-Virus in the long term? How can we avoid making that mistake ever again?" Because until you know how that mistake
was made, and can avoid it for the next generation, "Emerging and Evolving" threats will always be beyond your power to stop.</span><br>
<span></span><br>
<span>-dave</span><br>
<span></span><br>
<span></span><br>
<span></span><br>
<span></span><br>
<span>_______________________________________________</span><br>
<span>Dailydave mailing list</span><br>
<span><a href="mailto:Dailydave@lists.immunityinc.com">Dailydave@lists.immunityinc.com</a></span><br>
<span><a href="https://lists.immunityinc.com/mailman/listinfo/dailydave">https://lists.immunityinc.com/mailman/listinfo/dailydave</a></span><br>
</div>
</blockquote>
</div>
</body>
</html>