<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Software Talk &#187; spyware</title>
	<atom:link href="http://filezilla-download.com/tag/spyware/feed/" rel="self" type="application/rss+xml" />
	<link>http://filezilla-download.com</link>
	<description>All About Software</description>
	<lastBuildDate>Tue, 14 Jun 2011 06:00:13 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Detection of spyware removal software</title>
		<link>http://filezilla-download.com/detection-of-spyware-removal-software/</link>
		<comments>http://filezilla-download.com/detection-of-spyware-removal-software/#comments</comments>
		<pubDate>Wed, 13 Oct 2010 17:22:27 +0000</pubDate>
		<dc:creator>Software Talk</dc:creator>
				<category><![CDATA[software articles]]></category>
		<category><![CDATA[Detection]]></category>
		<category><![CDATA[removal]]></category>
		<category><![CDATA[software]]></category>
		<category><![CDATA[spyware]]></category>

		<guid isPermaLink="false">http://filezilla-download.com/detection-of-spyware-removal-software/</guid>
		<description><![CDATA[removal of spyware detection software to monitor and remove spyware on your computer. The program works by installing software. After the scan is completed already, the program provides a detailed report with a list of infected files found and deleted from your computer. Why are software programs available on the market is quite a challenge [...]]]></description>
			<content:encoded><![CDATA[<p> removal <b >of</b> spyware detection <b >software</b> to monitor and remove spyware on your computer. The program works by installing <b >software.</b> After the scan is completed already, the program provides a detailed report with a list of infected files found and deleted from your computer. </p>
<p> Why are <b >software programs</b> available on the market is quite a challenge to find the best <b >software</b> to use. One of the recommendationsMethods of computer owners to get the best reference <b >software</b> is used, a reliable source. Whether you purchase the <b >software</b> or download it for free. PC magazine is a reliable source as they provide valid information. This is to read the review websites unfounded preference as part of the information contained in these pages the information to fool users to purchase products that do not work or are inadequate. </p>
<p> Removing Some products are notreal. This means that it does not work at all, while some computer programs to install <b >malicious software</b> in E &#39;is therefore important to be careful when you use a program to remove the virus. </p>
<p> New versions of viruses are continuously published. This requires regular anti-spyware software updated to ensure effective protection of computer time. </p>
<p> E &#39;can receive regular updates as more manufacturers often release new anti-spyware database regularly. This<html> Databases can be achieved mainly by two methods. Some <b >software updates</b> may be received automatically updated from the internet for free or paying. </p>
<p> It &#39;important to establish regular automatic checks of computer virus infections. This is due to the fact that it is not always easy to identify an infected computer system. Some viruses are not recognized easily recognize and a lot of damage can be achieved will be caused by the virus. </p>
<p> Detection of spyware removal&gt; The software can be used once a month, once every week or every day. I am glad that everyone, spyware, adware, malware, and have been on my computer from Trojans all gone now all links to an <b >anti-adware software</b> of high quality that I found online, find, you can read on my website here below. </p>
]]></content:encoded>
			<wfw:commentRss>http://filezilla-download.com/detection-of-spyware-removal-software/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>An introduction to spyware infections and anti-spyware software</title>
		<link>http://filezilla-download.com/an-introduction-to-spyware-infections-and-anti-spyware-software/</link>
		<comments>http://filezilla-download.com/an-introduction-to-spyware-infections-and-anti-spyware-software/#comments</comments>
		<pubDate>Sat, 28 Aug 2010 17:44:18 +0000</pubDate>
		<dc:creator>Software Talk</dc:creator>
				<category><![CDATA[software articles]]></category>
		<category><![CDATA[antispyware]]></category>
		<category><![CDATA[infections]]></category>
		<category><![CDATA[introduction]]></category>
		<category><![CDATA[software]]></category>
		<category><![CDATA[spyware]]></category>

		<guid isPermaLink="false">http://filezilla-download.com/an-introduction-to-spyware-infections-and-anti-spyware-software/</guid>
		<description><![CDATA[Looking at the speed of the Internet is full of spyware that today the number of independent programmers and commercial companies have come a cool software to remove spyware and block. This software is all that anti-spyware. While some of these free spyware blockers available on the Internet, others are available at a small price: [...]]]></description>
			<content:encoded><![CDATA[<p> Looking at the speed of the Internet is full of spyware that today the number of independent programmers and commercial companies have come a cool <b >software</b> to remove spyware and block. This <b >software</b> is all that anti-spyware. While some of these free spyware blockers available on the Internet, others are available at a small price: As is spyware infecting your computer? How does <b >anti-spyware software</b> to combat spyware?Let&#39;s take a look: </p>
<p> <b>Spyware Infections</b> </p>
<p> Spyware is different from a computer virus. Viruses tend to move from machine to machine, while a system of computers infected with spyware tends not transferred to the infection. Spyware is a computer or deception of the user in any way to use up or <b >software vulnerabilities. Remember</b> that most spyware is installed without your knowledge of. Spyware can trick the user in two ways: </p>
<p>
 E &#39;contained in the rule<b >Software</b> to make an entry in the computer.<br />
 You can also trick the user into installing it.
</p>
<p> Some spyware is well, keeping the size of <b >security software</b> such as mimicry. </p>
<p> It &#39;pretty amazing, but a series of <b >spyware</b> comes with <b >the popular software.</b> In some cases, spyware authors will pay an amount of <b >software</b> including <b >shareware authors</b> to their software with their own. </p>
<p> <b>Anti-spyware programs</b></p>
<p> These programs may help the problem of spyware in two ways: </p>
<p> Real-Time Protection </p>
<p> A series of spyware blockers today they are able, real-time protection for your computer from these malicious programs. The working hours of an Anti Spyware is similar to an antivirus program. scan all incoming data and block line, remove the threat that <b >software</b> can be obtained. </p>
<p> Detect and remove already installedSpyware </p>
<p> In addition to providing real-time protection, anti-spyware programs can use popular computer can detect and remove malicious <b >software</b> already. </p>
<p> A series of good <b >software</b> is available on the Internet (for a price, of course!). Excluding a few all are free antispyware absolutely useless! </p>
<p> With this <b >software</b> you protect your computer you can really easy. How? Do not worry scan using your computer every time it is.<html> The <b >software</b> allows you to schedule daily, weekly or monthly scans to detect and remove malicious <b >software</b> installed on your computer. </p>
<p> A simple scan to reveal all the malicious <b >software</b> that the machine has been installed. You will be able to select a computer list <b >of spyware</b> installed on your system, which, like the shop and those who want to get rid of you, the!. </p>
<p> <b>Spyware Behavior</b> </p>
<p>
 Spyware&gt; Software is never alone. An infected computer usually has various infections.<br />
 If infected, the computer will use the computers more than they normally would display an undesirable behavior, and affects system performance.</p>
]]></content:encoded>
			<wfw:commentRss>http://filezilla-download.com/an-introduction-to-spyware-infections-and-anti-spyware-software/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>AntiSpyware Protection  Holes In The Shining Armor</title>
		<link>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2428/</link>
		<comments>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2428/#comments</comments>
		<pubDate>Wed, 10 Mar 2010 08:52:15 +0000</pubDate>
		<dc:creator>Software Talk</dc:creator>
				<category><![CDATA[Software Talk]]></category>
		<category><![CDATA[spyware]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Looking at all the ads which promise to get rid of all spy programs, one may wonder why there is still plenty of them everywhere and the situation is by no means getting better. So let me spoil the advertisers&#8217; mood and show some of the holes in the majority of software products we expect [...]]]></description>
			<content:encoded><![CDATA[<p>Looking at all the ads which promise to get rid of all spy  programs, one may wonder why there is still plenty of them  everywhere and the situation is by no means getting better.  So let me spoil the advertisers&#8217; mood and show some of the  holes in the majority of software products we expect to  protect our data.</p>
<p>Speaking about drawbacks of anti-spyware, let&#8217;s take the  word spyware in the narrow sense for a change and call  spyware only software products that really spy, i.e. steal  valuable information you want to keep private. Let&#8217;s leave  aside adware &#8212; this motley crew of advertising stuff;  information that some of them steal isn&#8217;t valuable enough.  It is keylogging programs that we should associate with the  term spyware first of all. This breed is exceptionally  dangerous &#8212; such threats as flourishing online bank fraud  and the recent outbreak of keylogger-containing Trojans  prove this.</p>
<p>Generally speaking, most anti-spyware works like that? Don&#8217;t  stop reading, please. Don&#8217;t skip over the paragraph. Do you  think that if you are not a tech person, it is none of your  business? You don&#8217;t write this software, you just use it &#8212;  so what? You haven&#8217;t made the car you are driving, either  (well, there may be some exceptions?). But you do know (at  least in general) what makes it move &#8212; and you won&#8217;t forget  to fill up its tank or have it serviced from time to time.  You know what will happen if you don&#8217;t. For the same reason  you&#8217;d better know a bit about anti-spy software installed on  any PC you use.</p>
<p>We all should know it to realize what exactly to expect from  all these anti-spy products with cool names. Their creators  and sellers promise you that these software products will  kill all spyware on your PC (or something like that).  First, is absolute protection possible? Second, what should  we expect from a typical anti-spy program and what it is  simply unable to do? To answer these questions, we should  understand how it works.</p>
<p>Generally speaking, most anti-spyware works like that: it  scans the operating system in search for suspicious bits of  code. Should the program find any, it compares these  suspicious pieces with bits of code (they are called  signatures), which belong to already detected and caught  spy programs. Signatures are kept in so-called signature  base &#8212; the inseparable part of any anti-spy program. The  more signatures it contains, the more spyware such program  will detect, so your PC will be protected more effectively.  As long as you update your anti-spy software regularly and  the system doesn&#8217;t come across some unknown spyware product,  everything is going to be all right.</p>
<p>As for me, this pattern looks pretty like police records and  works like them, too. But?the problem is just like the one  with police records ? the fact that all included there are  criminals doesn&#8217;t at all mean that all the criminals are  included into the records.</p>
<p>Well, what about the criminals (spy programs) that are not  included into the records (signature bases)? There are lots  of such programs &#8212; more than that &#8212; some of them will  never be in any signature base. Just like with criminals &#8212;  some of them haven&#8217;t been caught yet, and some will never be  caught ? because of their right of inviolability. Anti-  spy products based on signature base analysis will never be  able to protect against these spies. Don&#8217;t expect them to.</p>
<p>Let&#8217;s take a quick look on these elusive spy programs.</p>
<p>Group 1. Those which hasn&#8217;t been caught yet, because they  are:</p>
<p>1. brand-new ones. They are being constantly written,  released, used (for a very short time), detected and,  finally, included into signature bases. Anti-spyware  developers are now in the vicious circle of endless spy  hunt, trying to include as many spyware signatures (pieces  of code) into the bases as possible &#8211; and fast! Faster, to  outrun the competitors; faster, for new spyware &#8211; which is  being written and released all the time ? not to spread like  a wildfire. That&#8217;s the way a signature base grows.</p>
<p>2. written to be used only once.</p>
<p>These tailor-made, or should we say, custom-made,  keyloggers are extremely unlikely to be ever detected. As  soon as they have done their jobs (stealing data, of course  ?often from the particular computer) they simply disappear,  never to be seen again. Here belong keyloggers made mostly  for such tasks as espionage.</p>
<p>The main problem: keylogging software is relatively simple  and not too difficult to compile. Even an average computer  programmer can write a simple keylogger in a couple of days.  More sophisticated one will take longer to make, of course,  but not too long. Hackers often compile source code of  several keyloggers (it&#8217;s easy to find them in the Web&#8211;for  those who know where to look for) &#8212; and get a brand-new one  with an unknown signature even faster. If a keylogger can be  installed remotely without the victim&#8217;s knowledge, it gives  the hacker great possibility to steal any information he  pleases. If there is an opportunity, there always will be  one to use it. The period of time when a new spy already  exists, but the updates have not been released yet, is the  very time when hackers make their biggest profits. Trying to  catch them all is a hopeless idea; it looks too similar to  catching fleas one by one.</p>
<p>Group 2. Sacred cows.</p>
<p>No signature base will ever have their signatures. Here  belong mostly monitoring programs, which can be used for  spying as well. First, the ones created by (or for)  government agencies ? such as the famous Magic Lantern (the  brainchild of the Cyber Knight project). No product which  uses a signature base will protect against it; an ordinary  anti-spy will never detect such a program. The same  situation with other monitoring software, which certain  agencies utilize. These monitoring products simply don&#8217;t  exist for signature-base-using anti-spyware (though they  can well exist on any PC&#8211;yours included)</p>
<p>If you think I&#8217;m painting it too black let&#8217;s recall what  happened when code of D.I.R.T. (a covert spying tool  developed by Codex Data Systems) leaked out couple of years  ago and was found in the Web (merely by accident, by the  way). Once a top-secret project, it did become an open  secret &#8212; but the signature of this powerful monitoring  software hasn&#8217;t been included in any signature bases. That&#8217;s  what worries me the most; after this information leak nobody  knows for sure WHO can be using it &#8211;and WHAT FOR. What if  some other government monitoring program trickles into the  Internet, too?</p>
<p>Monitoring programs for parental control or workplace  surveillance are very common and easily available from the  Web. However, they can be used not only for those absolutely  legitimate purposes. Any monitoring program is actually a  double-edged sword because it almost always contains a  keylogging module. It is up to an end user to utilize  them&#8211;perhaps for spying. Legitimate monitoring programs are  sometimes not included into signature bases, so one can use  an anti-spy program and be spied on anyway.</p>
<p>Now the last (but not the least) threat &#8212; spy modules  incorporated into viruses and Trojan horse programs.  Unfortunately, all malware, including viruses, Trojan  horses, worms and other fauna, evolves (due to their  malicious creators). There already are so many hybrids  between one another that it&#8217;s hard to find, say, a pure  virus like ones used only several years ago. Lots of this  fauna can contain a keylogger &#8212; like MyDoom (sure you  remember this virus). They multiply and evolve, becoming  more and more malicious.</p>
<p>So, what conclusions could we draw out of this entire story  (sorry if it turned to be too pessimistic)?</p>
<p>Is absolute anti-spy protection possible? With existing  anti-spy software which uses signature bases &#8211; no.</p>
<p>However, there is a relatively new trend in software  development &#8212; not to use signature base analysis at all.  This approach is rather promising; it means that such  software&#8211;it already exists&#8211;can counteract even brand-new  and custom-made spies. You may read more about it if you  follow the link in my signature.</p>
<p>What should we expect from an average anti-monitoring or  anti-spy program? It does protect from spy software which it  knows. If it has the particular signature in its base, it  protects your PC from this particular program. If  anti-spyware uses a signature base, it will never kill all  spies on your PC&#8211;whatever the salesperson promises you.  Don&#8217;t expect complete security&#8211; there is no such thing  anymore.</p>
<p>The only hope is for entirely new technologies. If  developers can&#8217;t succeed in fighting spyware, they should  try something else.</p>
<p>Alexandra Gamanenko currently works at the Raytown Corporation, LLC &#8212; an independent software developing company. Visit its website  http://www.anti-keyloggers.com</p>
]]></content:encoded>
			<wfw:commentRss>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2428/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>AntiSpyware Protection  Holes In The Shining Armor</title>
		<link>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2411/</link>
		<comments>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2411/#comments</comments>
		<pubDate>Sun, 07 Mar 2010 12:51:20 +0000</pubDate>
		<dc:creator>Software Talk</dc:creator>
				<category><![CDATA[Software Talk]]></category>
		<category><![CDATA[spyware]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Looking at all the ads which promise to get rid of all spy programs, one may wonder why there is still plenty of them everywhere and the situation is by no means getting better. So let me spoil the advertisers&#8217; mood and show some of the holes in the majority of software products we expect [...]]]></description>
			<content:encoded><![CDATA[<p>Looking at all the ads which promise to get rid of all spy  programs, one may wonder why there is still plenty of them  everywhere and the situation is by no means getting better.  So let me spoil the advertisers&#8217; mood and show some of the  holes in the majority of software products we expect to  protect our data.</p>
<p>Speaking about drawbacks of anti-spyware, let&#8217;s take the  word spyware in the narrow sense for a change and call  spyware only software products that really spy, i.e. steal  valuable information you want to keep private. Let&#8217;s leave  aside adware &#8212; this motley crew of advertising stuff;  information that some of them steal isn&#8217;t valuable enough.  It is keylogging programs that we should associate with the  term spyware first of all. This breed is exceptionally  dangerous &#8212; such threats as flourishing online bank fraud  and the recent outbreak of keylogger-containing Trojans  prove this.</p>
<p>Generally speaking, most anti-spyware works like that? Don&#8217;t  stop reading, please. Don&#8217;t skip over the paragraph. Do you  think that if you are not a tech person, it is none of your  business? You don&#8217;t write this software, you just use it &#8212;  so what? You haven&#8217;t made the car you are driving, either  (well, there may be some exceptions?). But you do know (at  least in general) what makes it move &#8212; and you won&#8217;t forget  to fill up its tank or have it serviced from time to time.  You know what will happen if you don&#8217;t. For the same reason  you&#8217;d better know a bit about anti-spy software installed on  any PC you use.</p>
<p>We all should know it to realize what exactly to expect from  all these anti-spy products with cool names. Their creators  and sellers promise you that these software products will  kill all spyware on your PC (or something like that).  First, is absolute protection possible? Second, what should  we expect from a typical anti-spy program and what it is  simply unable to do? To answer these questions, we should  understand how it works.</p>
<p>Generally speaking, most anti-spyware works like that: it  scans the operating system in search for suspicious bits of  code. Should the program find any, it compares these  suspicious pieces with bits of code (they are called  signatures), which belong to already detected and caught  spy programs. Signatures are kept in so-called signature  base &#8212; the inseparable part of any anti-spy program. The  more signatures it contains, the more spyware such program  will detect, so your PC will be protected more effectively.  As long as you update your anti-spy software regularly and  the system doesn&#8217;t come across some unknown spyware product,  everything is going to be all right.</p>
<p>As for me, this pattern looks pretty like police records and  works like them, too. But?the problem is just like the one  with police records ? the fact that all included there are  criminals doesn&#8217;t at all mean that all the criminals are  included into the records.</p>
<p>Well, what about the criminals (spy programs) that are not  included into the records (signature bases)? There are lots  of such programs &#8212; more than that &#8212; some of them will  never be in any signature base. Just like with criminals &#8212;  some of them haven&#8217;t been caught yet, and some will never be  caught ? because of their right of inviolability. Anti-  spy products based on signature base analysis will never be  able to protect against these spies. Don&#8217;t expect them to.</p>
<p>Let&#8217;s take a quick look on these elusive spy programs.</p>
<p>Group 1. Those which hasn&#8217;t been caught yet, because they  are:</p>
<p>1. brand-new ones. They are being constantly written,  released, used (for a very short time), detected and,  finally, included into signature bases. Anti-spyware  developers are now in the vicious circle of endless spy  hunt, trying to include as many spyware signatures (pieces  of code) into the bases as possible &#8211; and fast! Faster, to  outrun the competitors; faster, for new spyware &#8211; which is  being written and released all the time ? not to spread like  a wildfire. That&#8217;s the way a signature base grows.</p>
<p>2. written to be used only once.</p>
<p>These tailor-made, or should we say, custom-made,  keyloggers are extremely unlikely to be ever detected. As  soon as they have done their jobs (stealing data, of course  ?often from the particular computer) they simply disappear,  never to be seen again. Here belong keyloggers made mostly  for such tasks as espionage.</p>
<p>The main problem: keylogging software is relatively simple  and not too difficult to compile. Even an average computer  programmer can write a simple keylogger in a couple of days.  More sophisticated one will take longer to make, of course,  but not too long. Hackers often compile source code of  several keyloggers (it&#8217;s easy to find them in the Web&#8211;for  those who know where to look for) &#8212; and get a brand-new one  with an unknown signature even faster. If a keylogger can be  installed remotely without the victim&#8217;s knowledge, it gives  the hacker great possibility to steal any information he  pleases. If there is an opportunity, there always will be  one to use it. The period of time when a new spy already  exists, but the updates have not been released yet, is the  very time when hackers make their biggest profits. Trying to  catch them all is a hopeless idea; it looks too similar to  catching fleas one by one.</p>
<p>Group 2. Sacred cows.</p>
<p>No signature base will ever have their signatures. Here  belong mostly monitoring programs, which can be used for  spying as well. First, the ones created by (or for)  government agencies ? such as the famous Magic Lantern (the  brainchild of the Cyber Knight project). No product which  uses a signature base will protect against it; an ordinary  anti-spy will never detect such a program. The same  situation with other monitoring software, which certain  agencies utilize. These monitoring products simply don&#8217;t  exist for signature-base-using anti-spyware (though they  can well exist on any PC&#8211;yours included)</p>
<p>If you think I&#8217;m painting it too black let&#8217;s recall what  happened when code of D.I.R.T. (a covert spying tool  developed by Codex Data Systems) leaked out couple of years  ago and was found in the Web (merely by accident, by the  way). Once a top-secret project, it did become an open  secret &#8212; but the signature of this powerful monitoring  software hasn&#8217;t been included in any signature bases. That&#8217;s  what worries me the most; after this information leak nobody  knows for sure WHO can be using it &#8211;and WHAT FOR. What if  some other government monitoring program trickles into the  Internet, too?</p>
<p>Monitoring programs for parental control or workplace  surveillance are very common and easily available from the  Web. However, they can be used not only for those absolutely  legitimate purposes. Any monitoring program is actually a  double-edged sword because it almost always contains a  keylogging module. It is up to an end user to utilize  them&#8211;perhaps for spying. Legitimate monitoring programs are  sometimes not included into signature bases, so one can use  an anti-spy program and be spied on anyway.</p>
<p>Now the last (but not the least) threat &#8212; spy modules  incorporated into viruses and Trojan horse programs.  Unfortunately, all malware, including viruses, Trojan  horses, worms and other fauna, evolves (due to their  malicious creators). There already are so many hybrids  between one another that it&#8217;s hard to find, say, a pure  virus like ones used only several years ago. Lots of this  fauna can contain a keylogger &#8212; like MyDoom (sure you  remember this virus). They multiply and evolve, becoming  more and more malicious.</p>
<p>So, what conclusions could we draw out of this entire story  (sorry if it turned to be too pessimistic)?</p>
<p>Is absolute anti-spy protection possible? With existing  anti-spy software which uses signature bases &#8211; no.</p>
<p>However, there is a relatively new trend in software  development &#8212; not to use signature base analysis at all.  This approach is rather promising; it means that such  software&#8211;it already exists&#8211;can counteract even brand-new  and custom-made spies. You may read more about it if you  follow the link in my signature.</p>
<p>What should we expect from an average anti-monitoring or  anti-spy program? It does protect from spy software which it  knows. If it has the particular signature in its base, it  protects your PC from this particular program. If  anti-spyware uses a signature base, it will never kill all  spies on your PC&#8211;whatever the salesperson promises you.  Don&#8217;t expect complete security&#8211; there is no such thing  anymore.</p>
<p>The only hope is for entirely new technologies. If  developers can&#8217;t succeed in fighting spyware, they should  try something else.</p>
<p>Alexandra Gamanenko currently works at the Raytown Corporation, LLC &#8212; an independent software developing company. Visit its website  http://www.anti-keyloggers.com</p>
]]></content:encoded>
			<wfw:commentRss>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2411/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>AntiSpyware Protection  Holes In The Shining Armor</title>
		<link>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2388/</link>
		<comments>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2388/#comments</comments>
		<pubDate>Wed, 03 Mar 2010 16:50:05 +0000</pubDate>
		<dc:creator>Software Talk</dc:creator>
				<category><![CDATA[Software Talk]]></category>
		<category><![CDATA[spyware]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Looking at all the ads which promise to get rid of all spy programs, one may wonder why there is still plenty of them everywhere and the situation is by no means getting better. So let me spoil the advertisers&#8217; mood and show some of the holes in the majority of software products we expect [...]]]></description>
			<content:encoded><![CDATA[<p>Looking at all the ads which promise to get rid of all spy  programs, one may wonder why there is still plenty of them  everywhere and the situation is by no means getting better.  So let me spoil the advertisers&#8217; mood and show some of the  holes in the majority of software products we expect to  protect our data.</p>
<p>Speaking about drawbacks of anti-spyware, let&#8217;s take the  word spyware in the narrow sense for a change and call  spyware only software products that really spy, i.e. steal  valuable information you want to keep private. Let&#8217;s leave  aside adware &#8212; this motley crew of advertising stuff;  information that some of them steal isn&#8217;t valuable enough.  It is keylogging programs that we should associate with the  term spyware first of all. This breed is exceptionally  dangerous &#8212; such threats as flourishing online bank fraud  and the recent outbreak of keylogger-containing Trojans  prove this.</p>
<p>Generally speaking, most anti-spyware works like that? Don&#8217;t  stop reading, please. Don&#8217;t skip over the paragraph. Do you  think that if you are not a tech person, it is none of your  business? You don&#8217;t write this software, you just use it &#8212;  so what? You haven&#8217;t made the car you are driving, either  (well, there may be some exceptions?). But you do know (at  least in general) what makes it move &#8212; and you won&#8217;t forget  to fill up its tank or have it serviced from time to time.  You know what will happen if you don&#8217;t. For the same reason  you&#8217;d better know a bit about anti-spy software installed on  any PC you use.</p>
<p>We all should know it to realize what exactly to expect from  all these anti-spy products with cool names. Their creators  and sellers promise you that these software products will  kill all spyware on your PC (or something like that).  First, is absolute protection possible? Second, what should  we expect from a typical anti-spy program and what it is  simply unable to do? To answer these questions, we should  understand how it works.</p>
<p>Generally speaking, most anti-spyware works like that: it  scans the operating system in search for suspicious bits of  code. Should the program find any, it compares these  suspicious pieces with bits of code (they are called  signatures), which belong to already detected and caught  spy programs. Signatures are kept in so-called signature  base &#8212; the inseparable part of any anti-spy program. The  more signatures it contains, the more spyware such program  will detect, so your PC will be protected more effectively.  As long as you update your anti-spy software regularly and  the system doesn&#8217;t come across some unknown spyware product,  everything is going to be all right.</p>
<p>As for me, this pattern looks pretty like police records and  works like them, too. But?the problem is just like the one  with police records ? the fact that all included there are  criminals doesn&#8217;t at all mean that all the criminals are  included into the records.</p>
<p>Well, what about the criminals (spy programs) that are not  included into the records (signature bases)? There are lots  of such programs &#8212; more than that &#8212; some of them will  never be in any signature base. Just like with criminals &#8212;  some of them haven&#8217;t been caught yet, and some will never be  caught ? because of their right of inviolability. Anti-  spy products based on signature base analysis will never be  able to protect against these spies. Don&#8217;t expect them to.</p>
<p>Let&#8217;s take a quick look on these elusive spy programs.</p>
<p>Group 1. Those which hasn&#8217;t been caught yet, because they  are:</p>
<p>1. brand-new ones. They are being constantly written,  released, used (for a very short time), detected and,  finally, included into signature bases. Anti-spyware  developers are now in the vicious circle of endless spy  hunt, trying to include as many spyware signatures (pieces  of code) into the bases as possible &#8211; and fast! Faster, to  outrun the competitors; faster, for new spyware &#8211; which is  being written and released all the time ? not to spread like  a wildfire. That&#8217;s the way a signature base grows.</p>
<p>2. written to be used only once.</p>
<p>These tailor-made, or should we say, custom-made,  keyloggers are extremely unlikely to be ever detected. As  soon as they have done their jobs (stealing data, of course  ?often from the particular computer) they simply disappear,  never to be seen again. Here belong keyloggers made mostly  for such tasks as espionage.</p>
<p>The main problem: keylogging software is relatively simple  and not too difficult to compile. Even an average computer  programmer can write a simple keylogger in a couple of days.  More sophisticated one will take longer to make, of course,  but not too long. Hackers often compile source code of  several keyloggers (it&#8217;s easy to find them in the Web&#8211;for  those who know where to look for) &#8212; and get a brand-new one  with an unknown signature even faster. If a keylogger can be  installed remotely without the victim&#8217;s knowledge, it gives  the hacker great possibility to steal any information he  pleases. If there is an opportunity, there always will be  one to use it. The period of time when a new spy already  exists, but the updates have not been released yet, is the  very time when hackers make their biggest profits. Trying to  catch them all is a hopeless idea; it looks too similar to  catching fleas one by one.</p>
<p>Group 2. Sacred cows.</p>
<p>No signature base will ever have their signatures. Here  belong mostly monitoring programs, which can be used for  spying as well. First, the ones created by (or for)  government agencies ? such as the famous Magic Lantern (the  brainchild of the Cyber Knight project). No product which  uses a signature base will protect against it; an ordinary  anti-spy will never detect such a program. The same  situation with other monitoring software, which certain  agencies utilize. These monitoring products simply don&#8217;t  exist for signature-base-using anti-spyware (though they  can well exist on any PC&#8211;yours included)</p>
<p>If you think I&#8217;m painting it too black let&#8217;s recall what  happened when code of D.I.R.T. (a covert spying tool  developed by Codex Data Systems) leaked out couple of years  ago and was found in the Web (merely by accident, by the  way). Once a top-secret project, it did become an open  secret &#8212; but the signature of this powerful monitoring  software hasn&#8217;t been included in any signature bases. That&#8217;s  what worries me the most; after this information leak nobody  knows for sure WHO can be using it &#8211;and WHAT FOR. What if  some other government monitoring program trickles into the  Internet, too?</p>
<p>Monitoring programs for parental control or workplace  surveillance are very common and easily available from the  Web. However, they can be used not only for those absolutely  legitimate purposes. Any monitoring program is actually a  double-edged sword because it almost always contains a  keylogging module. It is up to an end user to utilize  them&#8211;perhaps for spying. Legitimate monitoring programs are  sometimes not included into signature bases, so one can use  an anti-spy program and be spied on anyway.</p>
<p>Now the last (but not the least) threat &#8212; spy modules  incorporated into viruses and Trojan horse programs.  Unfortunately, all malware, including viruses, Trojan  horses, worms and other fauna, evolves (due to their  malicious creators). There already are so many hybrids  between one another that it&#8217;s hard to find, say, a pure  virus like ones used only several years ago. Lots of this  fauna can contain a keylogger &#8212; like MyDoom (sure you  remember this virus). They multiply and evolve, becoming  more and more malicious.</p>
<p>So, what conclusions could we draw out of this entire story  (sorry if it turned to be too pessimistic)?</p>
<p>Is absolute anti-spy protection possible? With existing  anti-spy software which uses signature bases &#8211; no.</p>
<p>However, there is a relatively new trend in software  development &#8212; not to use signature base analysis at all.  This approach is rather promising; it means that such  software&#8211;it already exists&#8211;can counteract even brand-new  and custom-made spies. You may read more about it if you  follow the link in my signature.</p>
<p>What should we expect from an average anti-monitoring or  anti-spy program? It does protect from spy software which it  knows. If it has the particular signature in its base, it  protects your PC from this particular program. If  anti-spyware uses a signature base, it will never kill all  spies on your PC&#8211;whatever the salesperson promises you.  Don&#8217;t expect complete security&#8211; there is no such thing  anymore.</p>
<p>The only hope is for entirely new technologies. If  developers can&#8217;t succeed in fighting spyware, they should  try something else.</p>
<p>Alexandra Gamanenko currently works at the Raytown Corporation, LLC &#8212; an independent software developing company. Visit its website  http://www.anti-keyloggers.com</p>
]]></content:encoded>
			<wfw:commentRss>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2388/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>AntiSpyware Protection  Holes In The Shining Armor</title>
		<link>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2360/</link>
		<comments>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2360/#comments</comments>
		<pubDate>Sat, 27 Feb 2010 00:48:35 +0000</pubDate>
		<dc:creator>Software Talk</dc:creator>
				<category><![CDATA[Software Talk]]></category>
		<category><![CDATA[spyware]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Looking at all the ads which promise to get rid of all spy programs, one may wonder why there is still plenty of them everywhere and the situation is by no means getting better. So let me spoil the advertisers&#8217; mood and show some of the holes in the majority of software products we expect [...]]]></description>
			<content:encoded><![CDATA[<p>Looking at all the ads which promise to get rid of all spy  programs, one may wonder why there is still plenty of them  everywhere and the situation is by no means getting better.  So let me spoil the advertisers&#8217; mood and show some of the  holes in the majority of software products we expect to  protect our data.</p>
<p>Speaking about drawbacks of anti-spyware, let&#8217;s take the  word spyware in the narrow sense for a change and call  spyware only software products that really spy, i.e. steal  valuable information you want to keep private. Let&#8217;s leave  aside adware &#8212; this motley crew of advertising stuff;  information that some of them steal isn&#8217;t valuable enough.  It is keylogging programs that we should associate with the  term spyware first of all. This breed is exceptionally  dangerous &#8212; such threats as flourishing online bank fraud  and the recent outbreak of keylogger-containing Trojans  prove this.</p>
<p>Generally speaking, most anti-spyware works like that? Don&#8217;t  stop reading, please. Don&#8217;t skip over the paragraph. Do you  think that if you are not a tech person, it is none of your  business? You don&#8217;t write this software, you just use it &#8212;  so what? You haven&#8217;t made the car you are driving, either  (well, there may be some exceptions?). But you do know (at  least in general) what makes it move &#8212; and you won&#8217;t forget  to fill up its tank or have it serviced from time to time.  You know what will happen if you don&#8217;t. For the same reason  you&#8217;d better know a bit about anti-spy software installed on  any PC you use.</p>
<p>We all should know it to realize what exactly to expect from  all these anti-spy products with cool names. Their creators  and sellers promise you that these software products will  kill all spyware on your PC (or something like that).  First, is absolute protection possible? Second, what should  we expect from a typical anti-spy program and what it is  simply unable to do? To answer these questions, we should  understand how it works.</p>
<p>Generally speaking, most anti-spyware works like that: it  scans the operating system in search for suspicious bits of  code. Should the program find any, it compares these  suspicious pieces with bits of code (they are called  signatures), which belong to already detected and caught  spy programs. Signatures are kept in so-called signature  base &#8212; the inseparable part of any anti-spy program. The  more signatures it contains, the more spyware such program  will detect, so your PC will be protected more effectively.  As long as you update your anti-spy software regularly and  the system doesn&#8217;t come across some unknown spyware product,  everything is going to be all right.</p>
<p>As for me, this pattern looks pretty like police records and  works like them, too. But?the problem is just like the one  with police records ? the fact that all included there are  criminals doesn&#8217;t at all mean that all the criminals are  included into the records.</p>
<p>Well, what about the criminals (spy programs) that are not  included into the records (signature bases)? There are lots  of such programs &#8212; more than that &#8212; some of them will  never be in any signature base. Just like with criminals &#8212;  some of them haven&#8217;t been caught yet, and some will never be  caught ? because of their right of inviolability. Anti-  spy products based on signature base analysis will never be  able to protect against these spies. Don&#8217;t expect them to.</p>
<p>Let&#8217;s take a quick look on these elusive spy programs.</p>
<p>Group 1. Those which hasn&#8217;t been caught yet, because they  are:</p>
<p>1. brand-new ones. They are being constantly written,  released, used (for a very short time), detected and,  finally, included into signature bases. Anti-spyware  developers are now in the vicious circle of endless spy  hunt, trying to include as many spyware signatures (pieces  of code) into the bases as possible &#8211; and fast! Faster, to  outrun the competitors; faster, for new spyware &#8211; which is  being written and released all the time ? not to spread like  a wildfire. That&#8217;s the way a signature base grows.</p>
<p>2. written to be used only once.</p>
<p>These tailor-made, or should we say, custom-made,  keyloggers are extremely unlikely to be ever detected. As  soon as they have done their jobs (stealing data, of course  ?often from the particular computer) they simply disappear,  never to be seen again. Here belong keyloggers made mostly  for such tasks as espionage.</p>
<p>The main problem: keylogging software is relatively simple  and not too difficult to compile. Even an average computer  programmer can write a simple keylogger in a couple of days.  More sophisticated one will take longer to make, of course,  but not too long. Hackers often compile source code of  several keyloggers (it&#8217;s easy to find them in the Web&#8211;for  those who know where to look for) &#8212; and get a brand-new one  with an unknown signature even faster. If a keylogger can be  installed remotely without the victim&#8217;s knowledge, it gives  the hacker great possibility to steal any information he  pleases. If there is an opportunity, there always will be  one to use it. The period of time when a new spy already  exists, but the updates have not been released yet, is the  very time when hackers make their biggest profits. Trying to  catch them all is a hopeless idea; it looks too similar to  catching fleas one by one.</p>
<p>Group 2. Sacred cows.</p>
<p>No signature base will ever have their signatures. Here  belong mostly monitoring programs, which can be used for  spying as well. First, the ones created by (or for)  government agencies ? such as the famous Magic Lantern (the  brainchild of the Cyber Knight project). No product which  uses a signature base will protect against it; an ordinary  anti-spy will never detect such a program. The same  situation with other monitoring software, which certain  agencies utilize. These monitoring products simply don&#8217;t  exist for signature-base-using anti-spyware (though they  can well exist on any PC&#8211;yours included)</p>
<p>If you think I&#8217;m painting it too black let&#8217;s recall what  happened when code of D.I.R.T. (a covert spying tool  developed by Codex Data Systems) leaked out couple of years  ago and was found in the Web (merely by accident, by the  way). Once a top-secret project, it did become an open  secret &#8212; but the signature of this powerful monitoring  software hasn&#8217;t been included in any signature bases. That&#8217;s  what worries me the most; after this information leak nobody  knows for sure WHO can be using it &#8211;and WHAT FOR. What if  some other government monitoring program trickles into the  Internet, too?</p>
<p>Monitoring programs for parental control or workplace  surveillance are very common and easily available from the  Web. However, they can be used not only for those absolutely  legitimate purposes. Any monitoring program is actually a  double-edged sword because it almost always contains a  keylogging module. It is up to an end user to utilize  them&#8211;perhaps for spying. Legitimate monitoring programs are  sometimes not included into signature bases, so one can use  an anti-spy program and be spied on anyway.</p>
<p>Now the last (but not the least) threat &#8212; spy modules  incorporated into viruses and Trojan horse programs.  Unfortunately, all malware, including viruses, Trojan  horses, worms and other fauna, evolves (due to their  malicious creators). There already are so many hybrids  between one another that it&#8217;s hard to find, say, a pure  virus like ones used only several years ago. Lots of this  fauna can contain a keylogger &#8212; like MyDoom (sure you  remember this virus). They multiply and evolve, becoming  more and more malicious.</p>
<p>So, what conclusions could we draw out of this entire story  (sorry if it turned to be too pessimistic)?</p>
<p>Is absolute anti-spy protection possible? With existing  anti-spy software which uses signature bases &#8211; no.</p>
<p>However, there is a relatively new trend in software  development &#8212; not to use signature base analysis at all.  This approach is rather promising; it means that such  software&#8211;it already exists&#8211;can counteract even brand-new  and custom-made spies. You may read more about it if you  follow the link in my signature.</p>
<p>What should we expect from an average anti-monitoring or  anti-spy program? It does protect from spy software which it  knows. If it has the particular signature in its base, it  protects your PC from this particular program. If  anti-spyware uses a signature base, it will never kill all  spies on your PC&#8211;whatever the salesperson promises you.  Don&#8217;t expect complete security&#8211; there is no such thing  anymore.</p>
<p>The only hope is for entirely new technologies. If  developers can&#8217;t succeed in fighting spyware, they should  try something else.</p>
<p>Alexandra Gamanenko currently works at the Raytown Corporation, LLC &#8212; an independent software developing company. Visit its website  http://www.anti-keyloggers.com</p>
]]></content:encoded>
			<wfw:commentRss>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2360/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>AntiSpyware Protection  Holes In The Shining Armor</title>
		<link>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2322/</link>
		<comments>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2322/#comments</comments>
		<pubDate>Sat, 20 Feb 2010 16:51:43 +0000</pubDate>
		<dc:creator>Software Talk</dc:creator>
				<category><![CDATA[Software Talk]]></category>
		<category><![CDATA[spyware]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Looking at all the ads which promise to get rid of all spy programs, one may wonder why there is still plenty of them everywhere and the situation is by no means getting better. So let me spoil the advertisers&#8217; mood and show some of the holes in the majority of software products we expect [...]]]></description>
			<content:encoded><![CDATA[<p>Looking at all the ads which promise to get rid of all spy  programs, one may wonder why there is still plenty of them  everywhere and the situation is by no means getting better.  So let me spoil the advertisers&#8217; mood and show some of the  holes in the majority of software products we expect to  protect our data.</p>
<p>Speaking about drawbacks of anti-spyware, let&#8217;s take the  word spyware in the narrow sense for a change and call  spyware only software products that really spy, i.e. steal  valuable information you want to keep private. Let&#8217;s leave  aside adware &#8212; this motley crew of advertising stuff;  information that some of them steal isn&#8217;t valuable enough.  It is keylogging programs that we should associate with the  term spyware first of all. This breed is exceptionally  dangerous &#8212; such threats as flourishing online bank fraud  and the recent outbreak of keylogger-containing Trojans  prove this.</p>
<p>Generally speaking, most anti-spyware works like that? Don&#8217;t  stop reading, please. Don&#8217;t skip over the paragraph. Do you  think that if you are not a tech person, it is none of your  business? You don&#8217;t write this software, you just use it &#8212;  so what? You haven&#8217;t made the car you are driving, either  (well, there may be some exceptions?). But you do know (at  least in general) what makes it move &#8212; and you won&#8217;t forget  to fill up its tank or have it serviced from time to time.  You know what will happen if you don&#8217;t. For the same reason  you&#8217;d better know a bit about anti-spy software installed on  any PC you use.</p>
<p>We all should know it to realize what exactly to expect from  all these anti-spy products with cool names. Their creators  and sellers promise you that these software products will  kill all spyware on your PC (or something like that).  First, is absolute protection possible? Second, what should  we expect from a typical anti-spy program and what it is  simply unable to do? To answer these questions, we should  understand how it works.</p>
<p>Generally speaking, most anti-spyware works like that: it  scans the operating system in search for suspicious bits of  code. Should the program find any, it compares these  suspicious pieces with bits of code (they are called  signatures), which belong to already detected and caught  spy programs. Signatures are kept in so-called signature  base &#8212; the inseparable part of any anti-spy program. The  more signatures it contains, the more spyware such program  will detect, so your PC will be protected more effectively.  As long as you update your anti-spy software regularly and  the system doesn&#8217;t come across some unknown spyware product,  everything is going to be all right.</p>
<p>As for me, this pattern looks pretty like police records and  works like them, too. But?the problem is just like the one  with police records ? the fact that all included there are  criminals doesn&#8217;t at all mean that all the criminals are  included into the records.</p>
<p>Well, what about the criminals (spy programs) that are not  included into the records (signature bases)? There are lots  of such programs &#8212; more than that &#8212; some of them will  never be in any signature base. Just like with criminals &#8212;  some of them haven&#8217;t been caught yet, and some will never be  caught ? because of their right of inviolability. Anti-  spy products based on signature base analysis will never be  able to protect against these spies. Don&#8217;t expect them to.</p>
<p>Let&#8217;s take a quick look on these elusive spy programs.</p>
<p>Group 1. Those which hasn&#8217;t been caught yet, because they  are:</p>
<p>1. brand-new ones. They are being constantly written,  released, used (for a very short time), detected and,  finally, included into signature bases. Anti-spyware  developers are now in the vicious circle of endless spy  hunt, trying to include as many spyware signatures (pieces  of code) into the bases as possible &#8211; and fast! Faster, to  outrun the competitors; faster, for new spyware &#8211; which is  being written and released all the time ? not to spread like  a wildfire. That&#8217;s the way a signature base grows.</p>
<p>2. written to be used only once.</p>
<p>These tailor-made, or should we say, custom-made,  keyloggers are extremely unlikely to be ever detected. As  soon as they have done their jobs (stealing data, of course  ?often from the particular computer) they simply disappear,  never to be seen again. Here belong keyloggers made mostly  for such tasks as espionage.</p>
<p>The main problem: keylogging software is relatively simple  and not too difficult to compile. Even an average computer  programmer can write a simple keylogger in a couple of days.  More sophisticated one will take longer to make, of course,  but not too long. Hackers often compile source code of  several keyloggers (it&#8217;s easy to find them in the Web&#8211;for  those who know where to look for) &#8212; and get a brand-new one  with an unknown signature even faster. If a keylogger can be  installed remotely without the victim&#8217;s knowledge, it gives  the hacker great possibility to steal any information he  pleases. If there is an opportunity, there always will be  one to use it. The period of time when a new spy already  exists, but the updates have not been released yet, is the  very time when hackers make their biggest profits. Trying to  catch them all is a hopeless idea; it looks too similar to  catching fleas one by one.</p>
<p>Group 2. Sacred cows.</p>
<p>No signature base will ever have their signatures. Here  belong mostly monitoring programs, which can be used for  spying as well. First, the ones created by (or for)  government agencies ? such as the famous Magic Lantern (the  brainchild of the Cyber Knight project). No product which  uses a signature base will protect against it; an ordinary  anti-spy will never detect such a program. The same  situation with other monitoring software, which certain  agencies utilize. These monitoring products simply don&#8217;t  exist for signature-base-using anti-spyware (though they  can well exist on any PC&#8211;yours included)</p>
<p>If you think I&#8217;m painting it too black let&#8217;s recall what  happened when code of D.I.R.T. (a covert spying tool  developed by Codex Data Systems) leaked out couple of years  ago and was found in the Web (merely by accident, by the  way). Once a top-secret project, it did become an open  secret &#8212; but the signature of this powerful monitoring  software hasn&#8217;t been included in any signature bases. That&#8217;s  what worries me the most; after this information leak nobody  knows for sure WHO can be using it &#8211;and WHAT FOR. What if  some other government monitoring program trickles into the  Internet, too?</p>
<p>Monitoring programs for parental control or workplace  surveillance are very common and easily available from the  Web. However, they can be used not only for those absolutely  legitimate purposes. Any monitoring program is actually a  double-edged sword because it almost always contains a  keylogging module. It is up to an end user to utilize  them&#8211;perhaps for spying. Legitimate monitoring programs are  sometimes not included into signature bases, so one can use  an anti-spy program and be spied on anyway.</p>
<p>Now the last (but not the least) threat &#8212; spy modules  incorporated into viruses and Trojan horse programs.  Unfortunately, all malware, including viruses, Trojan  horses, worms and other fauna, evolves (due to their  malicious creators). There already are so many hybrids  between one another that it&#8217;s hard to find, say, a pure  virus like ones used only several years ago. Lots of this  fauna can contain a keylogger &#8212; like MyDoom (sure you  remember this virus). They multiply and evolve, becoming  more and more malicious.</p>
<p>So, what conclusions could we draw out of this entire story  (sorry if it turned to be too pessimistic)?</p>
<p>Is absolute anti-spy protection possible? With existing  anti-spy software which uses signature bases &#8211; no.</p>
<p>However, there is a relatively new trend in software  development &#8212; not to use signature base analysis at all.  This approach is rather promising; it means that such  software&#8211;it already exists&#8211;can counteract even brand-new  and custom-made spies. You may read more about it if you  follow the link in my signature.</p>
<p>What should we expect from an average anti-monitoring or  anti-spy program? It does protect from spy software which it  knows. If it has the particular signature in its base, it  protects your PC from this particular program. If  anti-spyware uses a signature base, it will never kill all  spies on your PC&#8211;whatever the salesperson promises you.  Don&#8217;t expect complete security&#8211; there is no such thing  anymore.</p>
<p>The only hope is for entirely new technologies. If  developers can&#8217;t succeed in fighting spyware, they should  try something else.</p>
<p>Alexandra Gamanenko currently works at the Raytown Corporation, LLC &#8212; an independent software developing company. Visit its website  http://www.anti-keyloggers.com</p>
]]></content:encoded>
			<wfw:commentRss>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2322/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>AntiSpyware Protection  Holes In The Shining Armor</title>
		<link>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2320/</link>
		<comments>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2320/#comments</comments>
		<pubDate>Sat, 20 Feb 2010 08:51:40 +0000</pubDate>
		<dc:creator>Software Talk</dc:creator>
				<category><![CDATA[Software Talk]]></category>
		<category><![CDATA[spyware]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Looking at all the ads which promise to get rid of all spy programs, one may wonder why there is still plenty of them everywhere and the situation is by no means getting better. So let me spoil the advertisers&#8217; mood and show some of the holes in the majority of software products we expect [...]]]></description>
			<content:encoded><![CDATA[<p>Looking at all the ads which promise to get rid of all spy  programs, one may wonder why there is still plenty of them  everywhere and the situation is by no means getting better.  So let me spoil the advertisers&#8217; mood and show some of the  holes in the majority of software products we expect to  protect our data.</p>
<p>Speaking about drawbacks of anti-spyware, let&#8217;s take the  word spyware in the narrow sense for a change and call  spyware only software products that really spy, i.e. steal  valuable information you want to keep private. Let&#8217;s leave  aside adware &#8212; this motley crew of advertising stuff;  information that some of them steal isn&#8217;t valuable enough.  It is keylogging programs that we should associate with the  term spyware first of all. This breed is exceptionally  dangerous &#8212; such threats as flourishing online bank fraud  and the recent outbreak of keylogger-containing Trojans  prove this.</p>
<p>Generally speaking, most anti-spyware works like that? Don&#8217;t  stop reading, please. Don&#8217;t skip over the paragraph. Do you  think that if you are not a tech person, it is none of your  business? You don&#8217;t write this software, you just use it &#8212;  so what? You haven&#8217;t made the car you are driving, either  (well, there may be some exceptions?). But you do know (at  least in general) what makes it move &#8212; and you won&#8217;t forget  to fill up its tank or have it serviced from time to time.  You know what will happen if you don&#8217;t. For the same reason  you&#8217;d better know a bit about anti-spy software installed on  any PC you use.</p>
<p>We all should know it to realize what exactly to expect from  all these anti-spy products with cool names. Their creators  and sellers promise you that these software products will  kill all spyware on your PC (or something like that).  First, is absolute protection possible? Second, what should  we expect from a typical anti-spy program and what it is  simply unable to do? To answer these questions, we should  understand how it works.</p>
<p>Generally speaking, most anti-spyware works like that: it  scans the operating system in search for suspicious bits of  code. Should the program find any, it compares these  suspicious pieces with bits of code (they are called  signatures), which belong to already detected and caught  spy programs. Signatures are kept in so-called signature  base &#8212; the inseparable part of any anti-spy program. The  more signatures it contains, the more spyware such program  will detect, so your PC will be protected more effectively.  As long as you update your anti-spy software regularly and  the system doesn&#8217;t come across some unknown spyware product,  everything is going to be all right.</p>
<p>As for me, this pattern looks pretty like police records and  works like them, too. But?the problem is just like the one  with police records ? the fact that all included there are  criminals doesn&#8217;t at all mean that all the criminals are  included into the records.</p>
<p>Well, what about the criminals (spy programs) that are not  included into the records (signature bases)? There are lots  of such programs &#8212; more than that &#8212; some of them will  never be in any signature base. Just like with criminals &#8212;  some of them haven&#8217;t been caught yet, and some will never be  caught ? because of their right of inviolability. Anti-  spy products based on signature base analysis will never be  able to protect against these spies. Don&#8217;t expect them to.</p>
<p>Let&#8217;s take a quick look on these elusive spy programs.</p>
<p>Group 1. Those which hasn&#8217;t been caught yet, because they  are:</p>
<p>1. brand-new ones. They are being constantly written,  released, used (for a very short time), detected and,  finally, included into signature bases. Anti-spyware  developers are now in the vicious circle of endless spy  hunt, trying to include as many spyware signatures (pieces  of code) into the bases as possible &#8211; and fast! Faster, to  outrun the competitors; faster, for new spyware &#8211; which is  being written and released all the time ? not to spread like  a wildfire. That&#8217;s the way a signature base grows.</p>
<p>2. written to be used only once.</p>
<p>These tailor-made, or should we say, custom-made,  keyloggers are extremely unlikely to be ever detected. As  soon as they have done their jobs (stealing data, of course  ?often from the particular computer) they simply disappear,  never to be seen again. Here belong keyloggers made mostly  for such tasks as espionage.</p>
<p>The main problem: keylogging software is relatively simple  and not too difficult to compile. Even an average computer  programmer can write a simple keylogger in a couple of days.  More sophisticated one will take longer to make, of course,  but not too long. Hackers often compile source code of  several keyloggers (it&#8217;s easy to find them in the Web&#8211;for  those who know where to look for) &#8212; and get a brand-new one  with an unknown signature even faster. If a keylogger can be  installed remotely without the victim&#8217;s knowledge, it gives  the hacker great possibility to steal any information he  pleases. If there is an opportunity, there always will be  one to use it. The period of time when a new spy already  exists, but the updates have not been released yet, is the  very time when hackers make their biggest profits. Trying to  catch them all is a hopeless idea; it looks too similar to  catching fleas one by one.</p>
<p>Group 2. Sacred cows.</p>
<p>No signature base will ever have their signatures. Here  belong mostly monitoring programs, which can be used for  spying as well. First, the ones created by (or for)  government agencies ? such as the famous Magic Lantern (the  brainchild of the Cyber Knight project). No product which  uses a signature base will protect against it; an ordinary  anti-spy will never detect such a program. The same  situation with other monitoring software, which certain  agencies utilize. These monitoring products simply don&#8217;t  exist for signature-base-using anti-spyware (though they  can well exist on any PC&#8211;yours included)</p>
<p>If you think I&#8217;m painting it too black let&#8217;s recall what  happened when code of D.I.R.T. (a covert spying tool  developed by Codex Data Systems) leaked out couple of years  ago and was found in the Web (merely by accident, by the  way). Once a top-secret project, it did become an open  secret &#8212; but the signature of this powerful monitoring  software hasn&#8217;t been included in any signature bases. That&#8217;s  what worries me the most; after this information leak nobody  knows for sure WHO can be using it &#8211;and WHAT FOR. What if  some other government monitoring program trickles into the  Internet, too?</p>
<p>Monitoring programs for parental control or workplace  surveillance are very common and easily available from the  Web. However, they can be used not only for those absolutely  legitimate purposes. Any monitoring program is actually a  double-edged sword because it almost always contains a  keylogging module. It is up to an end user to utilize  them&#8211;perhaps for spying. Legitimate monitoring programs are  sometimes not included into signature bases, so one can use  an anti-spy program and be spied on anyway.</p>
<p>Now the last (but not the least) threat &#8212; spy modules  incorporated into viruses and Trojan horse programs.  Unfortunately, all malware, including viruses, Trojan  horses, worms and other fauna, evolves (due to their  malicious creators). There already are so many hybrids  between one another that it&#8217;s hard to find, say, a pure  virus like ones used only several years ago. Lots of this  fauna can contain a keylogger &#8212; like MyDoom (sure you  remember this virus). They multiply and evolve, becoming  more and more malicious.</p>
<p>So, what conclusions could we draw out of this entire story  (sorry if it turned to be too pessimistic)?</p>
<p>Is absolute anti-spy protection possible? With existing  anti-spy software which uses signature bases &#8211; no.</p>
<p>However, there is a relatively new trend in software  development &#8212; not to use signature base analysis at all.  This approach is rather promising; it means that such  software&#8211;it already exists&#8211;can counteract even brand-new  and custom-made spies. You may read more about it if you  follow the link in my signature.</p>
<p>What should we expect from an average anti-monitoring or  anti-spy program? It does protect from spy software which it  knows. If it has the particular signature in its base, it  protects your PC from this particular program. If  anti-spyware uses a signature base, it will never kill all  spies on your PC&#8211;whatever the salesperson promises you.  Don&#8217;t expect complete security&#8211; there is no such thing  anymore.</p>
<p>The only hope is for entirely new technologies. If  developers can&#8217;t succeed in fighting spyware, they should  try something else.</p>
<p>Alexandra Gamanenko currently works at the Raytown Corporation, LLC &#8212; an independent software developing company. Visit its website  http://www.anti-keyloggers.com</p>
]]></content:encoded>
			<wfw:commentRss>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2320/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>AntiSpyware Protection  Holes In The Shining Armor</title>
		<link>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2315/</link>
		<comments>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2315/#comments</comments>
		<pubDate>Fri, 19 Feb 2010 12:51:19 +0000</pubDate>
		<dc:creator>Software Talk</dc:creator>
				<category><![CDATA[Software Talk]]></category>
		<category><![CDATA[spyware]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Looking at all the ads which promise to get rid of all spy programs, one may wonder why there is still plenty of them everywhere and the situation is by no means getting better. So let me spoil the advertisers&#8217; mood and show some of the holes in the majority of software products we expect [...]]]></description>
			<content:encoded><![CDATA[<p>Looking at all the ads which promise to get rid of all spy  programs, one may wonder why there is still plenty of them  everywhere and the situation is by no means getting better.  So let me spoil the advertisers&#8217; mood and show some of the  holes in the majority of software products we expect to  protect our data.</p>
<p>Speaking about drawbacks of anti-spyware, let&#8217;s take the  word spyware in the narrow sense for a change and call  spyware only software products that really spy, i.e. steal  valuable information you want to keep private. Let&#8217;s leave  aside adware &#8212; this motley crew of advertising stuff;  information that some of them steal isn&#8217;t valuable enough.  It is keylogging programs that we should associate with the  term spyware first of all. This breed is exceptionally  dangerous &#8212; such threats as flourishing online bank fraud  and the recent outbreak of keylogger-containing Trojans  prove this.</p>
<p>Generally speaking, most anti-spyware works like that? Don&#8217;t  stop reading, please. Don&#8217;t skip over the paragraph. Do you  think that if you are not a tech person, it is none of your  business? You don&#8217;t write this software, you just use it &#8212;  so what? You haven&#8217;t made the car you are driving, either  (well, there may be some exceptions?). But you do know (at  least in general) what makes it move &#8212; and you won&#8217;t forget  to fill up its tank or have it serviced from time to time.  You know what will happen if you don&#8217;t. For the same reason  you&#8217;d better know a bit about anti-spy software installed on  any PC you use.</p>
<p>We all should know it to realize what exactly to expect from  all these anti-spy products with cool names. Their creators  and sellers promise you that these software products will  kill all spyware on your PC (or something like that).  First, is absolute protection possible? Second, what should  we expect from a typical anti-spy program and what it is  simply unable to do? To answer these questions, we should  understand how it works.</p>
<p>Generally speaking, most anti-spyware works like that: it  scans the operating system in search for suspicious bits of  code. Should the program find any, it compares these  suspicious pieces with bits of code (they are called  signatures), which belong to already detected and caught  spy programs. Signatures are kept in so-called signature  base &#8212; the inseparable part of any anti-spy program. The  more signatures it contains, the more spyware such program  will detect, so your PC will be protected more effectively.  As long as you update your anti-spy software regularly and  the system doesn&#8217;t come across some unknown spyware product,  everything is going to be all right.</p>
<p>As for me, this pattern looks pretty like police records and  works like them, too. But?the problem is just like the one  with police records ? the fact that all included there are  criminals doesn&#8217;t at all mean that all the criminals are  included into the records.</p>
<p>Well, what about the criminals (spy programs) that are not  included into the records (signature bases)? There are lots  of such programs &#8212; more than that &#8212; some of them will  never be in any signature base. Just like with criminals &#8212;  some of them haven&#8217;t been caught yet, and some will never be  caught ? because of their right of inviolability. Anti-  spy products based on signature base analysis will never be  able to protect against these spies. Don&#8217;t expect them to.</p>
<p>Let&#8217;s take a quick look on these elusive spy programs.</p>
<p>Group 1. Those which hasn&#8217;t been caught yet, because they  are:</p>
<p>1. brand-new ones. They are being constantly written,  released, used (for a very short time), detected and,  finally, included into signature bases. Anti-spyware  developers are now in the vicious circle of endless spy  hunt, trying to include as many spyware signatures (pieces  of code) into the bases as possible &#8211; and fast! Faster, to  outrun the competitors; faster, for new spyware &#8211; which is  being written and released all the time ? not to spread like  a wildfire. That&#8217;s the way a signature base grows.</p>
<p>2. written to be used only once.</p>
<p>These tailor-made, or should we say, custom-made,  keyloggers are extremely unlikely to be ever detected. As  soon as they have done their jobs (stealing data, of course  ?often from the particular computer) they simply disappear,  never to be seen again. Here belong keyloggers made mostly  for such tasks as espionage.</p>
<p>The main problem: keylogging software is relatively simple  and not too difficult to compile. Even an average computer  programmer can write a simple keylogger in a couple of days.  More sophisticated one will take longer to make, of course,  but not too long. Hackers often compile source code of  several keyloggers (it&#8217;s easy to find them in the Web&#8211;for  those who know where to look for) &#8212; and get a brand-new one  with an unknown signature even faster. If a keylogger can be  installed remotely without the victim&#8217;s knowledge, it gives  the hacker great possibility to steal any information he  pleases. If there is an opportunity, there always will be  one to use it. The period of time when a new spy already  exists, but the updates have not been released yet, is the  very time when hackers make their biggest profits. Trying to  catch them all is a hopeless idea; it looks too similar to  catching fleas one by one.</p>
<p>Group 2. Sacred cows.</p>
<p>No signature base will ever have their signatures. Here  belong mostly monitoring programs, which can be used for  spying as well. First, the ones created by (or for)  government agencies ? such as the famous Magic Lantern (the  brainchild of the Cyber Knight project). No product which  uses a signature base will protect against it; an ordinary  anti-spy will never detect such a program. The same  situation with other monitoring software, which certain  agencies utilize. These monitoring products simply don&#8217;t  exist for signature-base-using anti-spyware (though they  can well exist on any PC&#8211;yours included)</p>
<p>If you think I&#8217;m painting it too black let&#8217;s recall what  happened when code of D.I.R.T. (a covert spying tool  developed by Codex Data Systems) leaked out couple of years  ago and was found in the Web (merely by accident, by the  way). Once a top-secret project, it did become an open  secret &#8212; but the signature of this powerful monitoring  software hasn&#8217;t been included in any signature bases. That&#8217;s  what worries me the most; after this information leak nobody  knows for sure WHO can be using it &#8211;and WHAT FOR. What if  some other government monitoring program trickles into the  Internet, too?</p>
<p>Monitoring programs for parental control or workplace  surveillance are very common and easily available from the  Web. However, they can be used not only for those absolutely  legitimate purposes. Any monitoring program is actually a  double-edged sword because it almost always contains a  keylogging module. It is up to an end user to utilize  them&#8211;perhaps for spying. Legitimate monitoring programs are  sometimes not included into signature bases, so one can use  an anti-spy program and be spied on anyway.</p>
<p>Now the last (but not the least) threat &#8212; spy modules  incorporated into viruses and Trojan horse programs.  Unfortunately, all malware, including viruses, Trojan  horses, worms and other fauna, evolves (due to their  malicious creators). There already are so many hybrids  between one another that it&#8217;s hard to find, say, a pure  virus like ones used only several years ago. Lots of this  fauna can contain a keylogger &#8212; like MyDoom (sure you  remember this virus). They multiply and evolve, becoming  more and more malicious.</p>
<p>So, what conclusions could we draw out of this entire story  (sorry if it turned to be too pessimistic)?</p>
<p>Is absolute anti-spy protection possible? With existing  anti-spy software which uses signature bases &#8211; no.</p>
<p>However, there is a relatively new trend in software  development &#8212; not to use signature base analysis at all.  This approach is rather promising; it means that such  software&#8211;it already exists&#8211;can counteract even brand-new  and custom-made spies. You may read more about it if you  follow the link in my signature.</p>
<p>What should we expect from an average anti-monitoring or  anti-spy program? It does protect from spy software which it  knows. If it has the particular signature in its base, it  protects your PC from this particular program. If  anti-spyware uses a signature base, it will never kill all  spies on your PC&#8211;whatever the salesperson promises you.  Don&#8217;t expect complete security&#8211; there is no such thing  anymore.</p>
<p>The only hope is for entirely new technologies. If  developers can&#8217;t succeed in fighting spyware, they should  try something else.</p>
<p>Alexandra Gamanenko currently works at the Raytown Corporation, LLC &#8212; an independent software developing company. Visit its website  http://www.anti-keyloggers.com</p>
]]></content:encoded>
			<wfw:commentRss>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2315/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>AntiSpyware Protection  Holes In The Shining Armor</title>
		<link>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2296/</link>
		<comments>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2296/#comments</comments>
		<pubDate>Tue, 16 Feb 2010 08:50:23 +0000</pubDate>
		<dc:creator>Software Talk</dc:creator>
				<category><![CDATA[Software Talk]]></category>
		<category><![CDATA[spyware]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Looking at all the ads which promise to get rid of all spy programs, one may wonder why there is still plenty of them everywhere and the situation is by no means getting better. So let me spoil the advertisers&#8217; mood and show some of the holes in the majority of software products we expect [...]]]></description>
			<content:encoded><![CDATA[<p>Looking at all the ads which promise to get rid of all spy  programs, one may wonder why there is still plenty of them  everywhere and the situation is by no means getting better.  So let me spoil the advertisers&#8217; mood and show some of the  holes in the majority of software products we expect to  protect our data.</p>
<p>Speaking about drawbacks of anti-spyware, let&#8217;s take the  word spyware in the narrow sense for a change and call  spyware only software products that really spy, i.e. steal  valuable information you want to keep private. Let&#8217;s leave  aside adware &#8212; this motley crew of advertising stuff;  information that some of them steal isn&#8217;t valuable enough.  It is keylogging programs that we should associate with the  term spyware first of all. This breed is exceptionally  dangerous &#8212; such threats as flourishing online bank fraud  and the recent outbreak of keylogger-containing Trojans  prove this.</p>
<p>Generally speaking, most anti-spyware works like that? Don&#8217;t  stop reading, please. Don&#8217;t skip over the paragraph. Do you  think that if you are not a tech person, it is none of your  business? You don&#8217;t write this software, you just use it &#8212;  so what? You haven&#8217;t made the car you are driving, either  (well, there may be some exceptions?). But you do know (at  least in general) what makes it move &#8212; and you won&#8217;t forget  to fill up its tank or have it serviced from time to time.  You know what will happen if you don&#8217;t. For the same reason  you&#8217;d better know a bit about anti-spy software installed on  any PC you use.</p>
<p>We all should know it to realize what exactly to expect from  all these anti-spy products with cool names. Their creators  and sellers promise you that these software products will  kill all spyware on your PC (or something like that).  First, is absolute protection possible? Second, what should  we expect from a typical anti-spy program and what it is  simply unable to do? To answer these questions, we should  understand how it works.</p>
<p>Generally speaking, most anti-spyware works like that: it  scans the operating system in search for suspicious bits of  code. Should the program find any, it compares these  suspicious pieces with bits of code (they are called  signatures), which belong to already detected and caught  spy programs. Signatures are kept in so-called signature  base &#8212; the inseparable part of any anti-spy program. The  more signatures it contains, the more spyware such program  will detect, so your PC will be protected more effectively.  As long as you update your anti-spy software regularly and  the system doesn&#8217;t come across some unknown spyware product,  everything is going to be all right.</p>
<p>As for me, this pattern looks pretty like police records and  works like them, too. But?the problem is just like the one  with police records ? the fact that all included there are  criminals doesn&#8217;t at all mean that all the criminals are  included into the records.</p>
<p>Well, what about the criminals (spy programs) that are not  included into the records (signature bases)? There are lots  of such programs &#8212; more than that &#8212; some of them will  never be in any signature base. Just like with criminals &#8212;  some of them haven&#8217;t been caught yet, and some will never be  caught ? because of their right of inviolability. Anti-  spy products based on signature base analysis will never be  able to protect against these spies. Don&#8217;t expect them to.</p>
<p>Let&#8217;s take a quick look on these elusive spy programs.</p>
<p>Group 1. Those which hasn&#8217;t been caught yet, because they  are:</p>
<p>1. brand-new ones. They are being constantly written,  released, used (for a very short time), detected and,  finally, included into signature bases. Anti-spyware  developers are now in the vicious circle of endless spy  hunt, trying to include as many spyware signatures (pieces  of code) into the bases as possible &#8211; and fast! Faster, to  outrun the competitors; faster, for new spyware &#8211; which is  being written and released all the time ? not to spread like  a wildfire. That&#8217;s the way a signature base grows.</p>
<p>2. written to be used only once.</p>
<p>These tailor-made, or should we say, custom-made,  keyloggers are extremely unlikely to be ever detected. As  soon as they have done their jobs (stealing data, of course  ?often from the particular computer) they simply disappear,  never to be seen again. Here belong keyloggers made mostly  for such tasks as espionage.</p>
<p>The main problem: keylogging software is relatively simple  and not too difficult to compile. Even an average computer  programmer can write a simple keylogger in a couple of days.  More sophisticated one will take longer to make, of course,  but not too long. Hackers often compile source code of  several keyloggers (it&#8217;s easy to find them in the Web&#8211;for  those who know where to look for) &#8212; and get a brand-new one  with an unknown signature even faster. If a keylogger can be  installed remotely without the victim&#8217;s knowledge, it gives  the hacker great possibility to steal any information he  pleases. If there is an opportunity, there always will be  one to use it. The period of time when a new spy already  exists, but the updates have not been released yet, is the  very time when hackers make their biggest profits. Trying to  catch them all is a hopeless idea; it looks too similar to  catching fleas one by one.</p>
<p>Group 2. Sacred cows.</p>
<p>No signature base will ever have their signatures. Here  belong mostly monitoring programs, which can be used for  spying as well. First, the ones created by (or for)  government agencies ? such as the famous Magic Lantern (the  brainchild of the Cyber Knight project). No product which  uses a signature base will protect against it; an ordinary  anti-spy will never detect such a program. The same  situation with other monitoring software, which certain  agencies utilize. These monitoring products simply don&#8217;t  exist for signature-base-using anti-spyware (though they  can well exist on any PC&#8211;yours included)</p>
<p>If you think I&#8217;m painting it too black let&#8217;s recall what  happened when code of D.I.R.T. (a covert spying tool  developed by Codex Data Systems) leaked out couple of years  ago and was found in the Web (merely by accident, by the  way). Once a top-secret project, it did become an open  secret &#8212; but the signature of this powerful monitoring  software hasn&#8217;t been included in any signature bases. That&#8217;s  what worries me the most; after this information leak nobody  knows for sure WHO can be using it &#8211;and WHAT FOR. What if  some other government monitoring program trickles into the  Internet, too?</p>
<p>Monitoring programs for parental control or workplace  surveillance are very common and easily available from the  Web. However, they can be used not only for those absolutely  legitimate purposes. Any monitoring program is actually a  double-edged sword because it almost always contains a  keylogging module. It is up to an end user to utilize  them&#8211;perhaps for spying. Legitimate monitoring programs are  sometimes not included into signature bases, so one can use  an anti-spy program and be spied on anyway.</p>
<p>Now the last (but not the least) threat &#8212; spy modules  incorporated into viruses and Trojan horse programs.  Unfortunately, all malware, including viruses, Trojan  horses, worms and other fauna, evolves (due to their  malicious creators). There already are so many hybrids  between one another that it&#8217;s hard to find, say, a pure  virus like ones used only several years ago. Lots of this  fauna can contain a keylogger &#8212; like MyDoom (sure you  remember this virus). They multiply and evolve, becoming  more and more malicious.</p>
<p>So, what conclusions could we draw out of this entire story  (sorry if it turned to be too pessimistic)?</p>
<p>Is absolute anti-spy protection possible? With existing  anti-spy software which uses signature bases &#8211; no.</p>
<p>However, there is a relatively new trend in software  development &#8212; not to use signature base analysis at all.  This approach is rather promising; it means that such  software&#8211;it already exists&#8211;can counteract even brand-new  and custom-made spies. You may read more about it if you  follow the link in my signature.</p>
<p>What should we expect from an average anti-monitoring or  anti-spy program? It does protect from spy software which it  knows. If it has the particular signature in its base, it  protects your PC from this particular program. If  anti-spyware uses a signature base, it will never kill all  spies on your PC&#8211;whatever the salesperson promises you.  Don&#8217;t expect complete security&#8211; there is no such thing  anymore.</p>
<p>The only hope is for entirely new technologies. If  developers can&#8217;t succeed in fighting spyware, they should  try something else.</p>
<p>Alexandra Gamanenko currently works at the Raytown Corporation, LLC &#8212; an independent software developing company. Visit its website  http://www.anti-keyloggers.com</p>
]]></content:encoded>
			<wfw:commentRss>http://filezilla-download.com/antispyware-protection-holes-in-the-shining-armor-2296/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

