3 ms·
Maybe no one person has the expertise to analyze a sample of this malware in its entirety. But treating malware samples like weapons to hide (to be even disasse
by drvdevd 13y ago
Maybe no one person has the expertise to analyze a sample of this malware in its entirety. But treating malware samples like weapons to hide (to be even disassembled only in maximum isolation?), somehow seems similar to the line of thought taken by commercial software vendors who think distributing binaries without source makes them more secure (okay maybe that's a stretch).
But my main point is - viruses (and other forms of malware) aren't actual biological viruses necessitating strict containment. They're code and we CAN understand them. More access means publicly accessible countermeasures are likely to develop faster. And yes - some people will take advantage of this by adapting the techniques employed therein for evil. I think it's worth the risk to try to understand it.
And yeah, don't just run it on your machine directly in a debugger of course. That's likely to be containment enough.