Malware analysts really should stop publishing MD5 sigs. If I were GCHQ I'ld upload a fake sample with matching hash to Virus Total to troll
-
@FredericJacobs@thegrugq is helpful when sweeping large networks for the same file
@attrc @FredericJacobs @thegrugq Agreed it's helpful, but in some cases (like this one), it might have been better to leave them out.
-
-
@bartblaze@FredericJacobs@thegrugq I see it as a race btwn finding it quick (hashing) vs deeper searches that give attackers more time -
@attrc@FredericJacobs@thegrugq Fair point. Depending hugely on the resources of the attacker/defender - who has the most? - Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.