Eggheads: crusade (was: vulnerability)

[Derek Kuliñski]

Hello Simon,

Wednesday, December 14, 2005, 4:15:40 PM, you wrote:

> Yes, that's basically what windrop is. If you refer to the version
> released at http://windrop.sf.net/, that is. The policy of not helping
> people with windrop issues isn't a global one just because some eggdrop
> channels carry that policy. Some problems are naturally associated with
> running any piece of software on a defect operating system with its own
> set of misbehaviours, and I suppose that's what some old-fashioned fora
> don't like adjusting to.

The real problem with windrop is that when it crashes there's not much
we can do. Because the user is not the one wh compiled it. We cannot
simply ask user to run gdb and show was which line in the source
triggered that crash...

Even the core dumped by cygwin1.dll doesn't seem to have any useful
informations (although I might be wrong here)...

>> But the trojan is called WinEggDrop.
> There's only one trojan/virus/worm called that?

No idea, I only found this one.

>> Yes, [that's] true I'm even little afraid to tell others that I'm an
>> eggdrop contributor...
> A-ha!

LOL

>>>>Maybe we should notify antivirus firms to ask them to call this
>>>>product differently? Although I belive they still would put that name
>>>>in the list of aliases...
> Too many anti-virus firms to convince. Plus, they're right about the
> name since somebody deliberately duped it to cheat the average IRC user
> who is only getting into IRC lore and might fall for it.

I didn't thought that, this makes sense... And probably that's why is
called WinEggDrop...

>>>So what ever they've done, steal the code or just steal the
>>>name/identity and good will the name eggdrop should have generated,
>>>the besmirching of the Eggdrop name needs to stop.
> I think your crusade is an overreaction. The FBI, the DMCA, anti-virus
> firms for the sake of lifting the status of a somewhat, yet still not
> very well known piece of open source software? I think the community has
> a better hand than petty virus makers who suck at naming their vira.

I guess for a regular user this really doesn't matter, but for
developers it's kind of discouraging, since putting word eggdrop on
resume might give opposite reaction than intended...

-- 
Best regards,
 Derek                            mailto:takeda at eggheads.w.pl
CCNA, SCSA, SCNA, LPIC, MCP certified
http://www.takeda.tk

-- If debugging is the process of removing bugs, then programming must be the process of putting them in.