Ad-aware attacked as poor written program

Hi malware fighters,

Many of us use lavasoft’s Ad-Aware. This program has come under fire here: http://www.rootkit.com/newsread.php?newsid=471

Read this, and then I like to have your comments. Polonus is curious what you think, while security experts mention Ad-Aware as the best of the mythical three.

The author’s rant reminds me of this online exchange, which is very creepy reading material:
http://madchat.org/vxdevl/vdat/tuencscn.htm

This is what we are up against, dear malware fighters. Hopefully we will stay on top of them.

polonus


Well, it was interesting reading and scary to know Ad-Aware could so easily be compromised. :o

I will still use Ad-Aware until it is proven to be unsafe. :frowning:


Hi CharleyO,

A lot would be gained here, if programmers were trained with “secure programming at mind” from the start. This has not been done in the past, and these are really the sad results of such a policy. If “diversification”, as Bob calls it, also means you have all sorts of code pudding jellied together from the start (even inside your browser), you are sure to land in the swampy mess we find ourselves in now. Open source means an enormous improvement, sadly also for the malware artists, and as windows announces it has windows run on these more secure platforms (Knoppix etc.), maybe the landscape will change for the better at long last

Furthermore the comments are one sided, the character-name from Blade Runner speaks for itself, as mentioning F-secure here. But now you know why I am a fan of remote online anti-spyware check-ups (there you hope is not tampering), and we have ewido still, that goes even deeper as Ad-Aware. Basically the detection possibilities in lavasoft’s program are great. Multi-layered security is the answer to reverse-engineering folks.

polonus

:slight_smile: Hi All :

 The following Posts on the landzdown forum express my
 viewpoint :

"Sounds like someone with an axe to grind against Lavasoft. As anyone who is involved in the battle to help users regain control of their machines, there is no one program that can do it all, which is why we have people like Merijn, Atribune, Noahdfear, Swandog, RubbeRDuckY, Toadbee, S!Ri and a host of others who develop specialized programs for our use. There is no perfect software program. We’ve all become more and more aware of the vulnerabilities. "

"Is this the same Roy Batty who lead the renegade Nexus 6 Replicants in Blade Runner?

Seriously, though, who is this author, and do they have any credentials? "

"Good question, particularly when management at that site posts:

Ok, I am not sure why you stole my ICON, but you need to change it or your account will be deleted.

-management

AKA the real Fuzen

http://www.rootkit.com/board.php?thread=6385&did=edge471&disp=6385&closed=1

Was the poster hoping to achieve some type of “validity” by using a staff member’s avatar?

I certainly am not about to speculate on the content of the person’s claims but leave that to the developers. There are too many people needing help to waste time spinning wheels. "

:slight_smile: Hi All :

  Perhaps the "Writer" is one of those posting a "review"
  of Avast on download.com at :

http://www.download.com/Avast-Home-Edition/3640-2239_4-10375520.html?sb=3&v=0 .

Hi Spiritsongs,

As you can conclude from this, these are people of a negative posture. Unlike the ones on download dot com that sell crap or just nonsense, the Blade Runner chap is a reverser of some sort or some black hat coder. In learning to code to-day or program as such, very little attention is given to be aware of security, not falling into traps for negative coding, with the possibilities of buffer overflows in mind. The larger platform of Open Source helped a lot, both in a positive and negative sense here.
With data fuzzing and awareness we hope the tide is turning, but we need to close the gap, because a 600% increase in the use of rootkit techniques doesn’t allow us to sit idle or the world wide web will get unworkable in the coming two or three years by a sea of malware.

polonus