Index
> Feedback > Discussing Viruses and AVsGoto page 1, 2 Next |
| Should discussion and posting of virus-related subjects and code be allowed on the forum? | ||||||||||||||
|
||||||||||||||
| Total Votes : 41 |
| Author |
|
|
Matrix
but we shouldnt support suspicious projects though,
anyway, as we were talking about, knowledge can be used at either bad or good, we can just hope someone out there not writing format drive virus to damage our work, programs, data... |
|||
30 Nov 2005, 02:41 |
|
|
vbVeryBeginner
em.. does the result of this poll would change peoples' mindset or perspective? esp vortex and tomasz?
this is what actually happening from our history till now. "different opinion" and " 'face' problem 面子問題"  guess life is like that.
maybe we could add one more section to discuss "sensitive" code (virus, antivirus, patcher, reverse engineering and ...). and only people who got 10 posts (adult  ) or higher could view that section. just my 2 cents. |
|||
|
30 Nov 2005, 13:53 |
|
|
vid
so people will spam to get to *top secret* section?
|
|||
|
30 Nov 2005, 14:22 |
|
|
decard
I voted "no", but actually I don't care if viruses will be discussed here. Personally I'm not interested in viruses at all.
|
|||
|
30 Nov 2005, 14:48 |
|
|
vid
decard: too bad, you would learn that "mov" doesn't rewrite ZF
Code: ;from strlib.inc mov ecx,dword[esp+20+12] ; mov ecx,[pos] jz @f rep movsb @@: (sorry if it's JohnFound's code, i don't know now, but lot of code there is apparently yours) Last edited by vid on 30 Nov 2005, 15:18; edited 1 time in total |
|||
|
30 Nov 2005, 15:12 |
|
|
MazeGen
I, personally, don't mind such code on this forum, if the code is simple and virtually not much dangerous (I count simple DOS virii as very little of dangerous).
On the other side, one AVer from one big local AV company once said to me: never wrote any, even very simple, virus or something, or you lost your chances to be employable in this area. Therefore, I don't want to be designated as virii supporter. For this reason, I also never discuss topics on (more or less legal) cracking boards. I also doubt that sooner or later this forum would be known as high quality forum with support for virus writers and it might discourage another asmers, fasm newbies to ask here about fasm, for similar reasons I mentioned above. As for vbVeryBeginner's suggestion of the special section, it would always need constant monitoring, so it is also question of good-class moderator. I don't think number of posts would forbid real virus-writer to post in such section. I voted "no", but it is more complicated. |
|||
|
30 Nov 2005, 15:16 |
|
|
gunblade
Heh, this poll has no purpose, it's not to try to force people to believe one thing or another, it's just to see what the general view on the discussion of virus code is. I expected to see more yes'es than is shown, but it is kind of a hard question to say yes or no to. As theres always contributing factors, like the questions asked on the code, and the alterior motive of the poster.
Thanks for voting and your comments, interesting to read. gunblade |
|||
|
30 Nov 2005, 16:27 |
|
|
decard
vid wrote: decard: too bad, you would learn that "mov" doesn't rewrite ZF I don't know whose code is this. But I'm sure that every code YOU wrote when you were learning assembly was perfect. |
|||
|
01 Dec 2005, 13:57 |
|
|
LocoDelAssembly
Are you sure the code is wrong? Note that the call to StrPtr sets that flag.
Code: stdcall StrPtr, ebx mov edi,eax mov ecx,dword[esp+20+12] ; mov ecx,[pos] jz @f rep movsb Code: proc StrPtr ; proc StrPtr [hString] mov eax,[esp+4] ; mov eax,[hString] test eax,$ffff0000 jnz .finish ; It's pointer, go to finish. cmp eax,[StrTable.count] jae .notfound push ebx mov ebx, [StrTable.ptr] mov eax, [4*eax+ebx] pop ebx .finish: ret 4 ; ZF = 0 .notfound: xor eax,eax ret 4 ; ZF = 1 endp |
|||
|
01 Dec 2005, 14:59 |
|
|
OzzY
I think viruses are a very good way to learn assembly. This way I've learned ASM. VX zines are very good stuff. Spread viruses is lame stuff.
I voted 'yes'. |
|||
|
01 Dec 2005, 18:23 |
|
|
vbVeryBeginner
if yes then how should we discuss it (without posting a virus sample?)?
if no, then perhaps, some people please make an announcement so everybody know. so some virus thread wouldn't be deleted without an explanation. thank you. |
|||
|
01 Dec 2005, 19:47 |
|
|
Matrix
i have some suspicious files too, keylog, backdoor... left from system cleaning, but i wasn't thinking to post them somehow anywhere...
vbVeryBeginner, if you post some virus.exe files, there is a chance of this board becoming some kind of virus source, and anyone can just download and spread your virus, imagine in school... for example. |
|||
|
01 Dec 2005, 22:11 |
|
|
Tomasz Grysztar
vbVeryBeginner,
you should post perhaps some disassembly, personal analysis and thoughts instead of not disarmed binary. Show you are the one of assembly programmers.  |
|||
|
02 Dec 2005, 08:56 |
|
|
vbVeryBeginner
Tomasz Grysztar wrote: vbVeryBeginner, k, thanks tomasz,
glad to see life can keeps on going now.  |
|||
|
02 Dec 2005, 11:44 |
|
|
RedGhost
well, my main "programmer" projects are game hacks (cheats) this involve reverse engineering the game engine or gfx api (opengl, d3d) and detouring, patching etc, even though its re and usually against the games license i don't really consider it malicous and don't like malware so i voted no
maybe it should be allowed only if the virus is very out of date, and for very old/older os's, i realize alot of people still use dos, but just nothing too relevant to todays os's _________________ redghost.ca |
|||
|
03 Dec 2005, 04:25 |
|
|
jdawg
I think that posting virus code is a good thing for two reasons. One if the right people saw it, they might review their own code, and find that they themselves have coded a virus, then work to fix it. Second, there is no knowledge that is not power. If you want to fight something, like viruses then you have to know how they are built in order to properly combat them.
Of course, this is assuming that there are still good people capable of possessing this knowledge without feeling the urge to use the code themselves. |
|||
|
03 Dec 2005, 09:42 |
|
|
vid
decard wrote: I don't know whose code is this. But I'm sure that every code YOU wrote when you were learning assembly was perfect. Hey, don't get angry... i was joking |
|||
|
05 Dec 2005, 10:24 |
|
|
decard
hehe, that's ok, everybody does mistakes anyway.
|
|||
|
05 Dec 2005, 13:09 |
|
|
edfed
in my opinion viruses and other crashing oriented programms don't have a reason to be
not that computer is a tools to make easier the tasks of every days so i hate viruses to make a good virus protection i think that we can devellop a new type of partition whith protections included in every cluster or sectors so i let you think about |
|||
|
28 Feb 2006, 11:54 |
|
| Goto page 1, 2 Next < Last Thread | Next Thread > |
Forum Rules:
|