[Cisspstudy] cisspstudy Digest, Vol 18, Issue 14

Sun Dec 20 02:14:30 EST 2009

Yes, it is ofcourse ethical, provided

1. It is being done in a controlled environment as mentioned & that
due care is being taken not to expose it to outer world under any
circumstances.
2. His job responsibilities expect him to or he has the permission to
develop the virus for test purposes. Because, at times, though the
intent could be good, but it could still be a violation if he does not
have the permission to do so.

Tx.
Vivek

On Sun, Dec 20, 2009 at 5:52 AM,  <cisspstudy-request at cccure.org> wrote:
> Send cisspstudy mailing list submissions to
>        cisspstudy at cccure.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
>        http://cccure.org/mailman/listinfo/cisspstudy_cccure.org
> or, via email, send a message with subject or body 'help' to
>        cisspstudy-request at cccure.org
>
> You can reach the person managing the list at
>        cisspstudy-owner at cccure.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of cisspstudy digest..."
>
>
> Today's Topics:
>
>   1. questions (Gaurav C)
>   2. Re: questions (gerritsjs)
>   3. Re: questions (Kristy Seaton)
>   4. Re: questions (fzbrick at gmail.com)
>   5. Re: questions (Kristy Seaton)
>   6. Re: questions (Leif Palmer)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Sat, 19 Dec 2009 14:21:10 -0800 (PST)
> From: Gaurav C <gaurav_va at yahoo.com>
> To: The CISSP Study Mailing list <cisspstudy at cccure.org>
> Subject: [Cisspstudy] questions
> Message-ID: <192261.88059.qm at web30907.mail.mud.yahoo.com>
> Content-Type: text/plain; charset="us-ascii"
>
> Can you please let me know if it can be said to be ethical if a programmer that work in anti-virus company creates a virus to test his anti virus in an control environment?
>
> router works on which layers ?.
> session layer
> Transport layer
> data link layer
>
> Gaurav
>
>
>
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20091219/35e1c034/attachment-0001.html>
>
> ------------------------------
>
> Message: 2
> Date: Sat, 19 Dec 2009 15:00:27 -0800
> From: "gerritsjs" <gerritsjs at gmail.com>
> To: "'The CISSP Study Mailing list'" <cisspstudy at cccure.org>
> Subject: Re: [Cisspstudy] questions
> Message-ID: <4b2d5b0f.c501be0a.331c.fffff901 at mx.google.com>
> Content-Type: text/plain; charset="us-ascii"
>
> Routers are responsible to route packages to appropriate IP addesses.
>
>
>
>  _____
>
> From: cisspstudy-bounces at cccure.org [mailto:cisspstudy-bounces at cccure.org]
> On Behalf Of Gaurav C
> Sent: Saturday, December 19, 2009 2:21 PM
> To: The CISSP Study Mailing list
> Subject: [Cisspstudy] questions
>
>
>
>
> Can you please let me know if it can be said to be ethical if a programmer
> that work in anti-virus company creates a virus to test his anti virus in an
> control environment?
>
> router works on which layers ?.
> session layer
> Transport layer
> data link layer
>
> Gaurav
>
>
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20091219/66011d9b/attachment-0001.html>
>
> ------------------------------
>
> Message: 3
> Date: Sat, 19 Dec 2009 15:02:49 -0800
> From: Kristy Seaton <kristy.seaton at gmail.com>
> To: The CISSP Study Mailing list <cisspstudy at cccure.org>
> Subject: Re: [Cisspstudy] questions
> Message-ID:
>        <3568576d0912191502k498847f0me2a098822db11d0f at mail.gmail.com>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Routers work in the network layer.
>
> If I remember correctly, it is consider ethical only when created in a
> controlled environment.
>
> Someone please correct me if I am wrong.
>
> On Sat, Dec 19, 2009 at 2:21 PM, Gaurav C <gaurav_va at yahoo.com> wrote:
>
>> Can you please let me know if it can be said to be ethical if a programmer
>> that work in anti-virus company creates a virus to test his anti virus in an
>> control environment?
>>
>> router works on which layers ?.
>> session layer
>> Transport layer
>> data link layer
>>
>> Gaurav
>>
>>
>> _______________________________________________
>> cisspstudy mailing list
>> cisspstudy at cccure.org
>> http://cccure.org/mailman/listinfo/cisspstudy_cccure.org
>>
>>
>
>
> --
> "Wisdom is not a product of schooling, but of the lifelong attempt to
> acquire it."
>
> - Albert Einstein
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20091219/1c99cf54/attachment-0001.html>
>
> ------------------------------
>
> Message: 4
> Date: Sat, 19 Dec 2009 18:16:02 -0500
> From: fzbrick at gmail.com
> To: The CISSP Study Mailing list <cisspstudy at cccure.org>
> Subject: Re: [Cisspstudy] questions
> Message-ID: <5FC091EF-96DD-4B70-A24E-FC96BA78ABDA at gmail.com>
> Content-Type: text/plain; charset="us-ascii"; Format="flowed";
>        DelSp="yes"
>
> That is an exam question.
>
> Sent from my iPhone
>
> On Dec 19, 2009, at 5:21 PM, Gaurav C <gaurav_va at yahoo.com> wrote:
>
>> Can you please let me know if it can be said to be ethical if a
>> programmer that work in anti-virus company creates a virus to test
>> his anti virus in an control environment?
>>
>> router works on which layers ?.
>> session layer
>> Transport layer
>> data link layer
>>
>> Gaurav
>>
>> _______________________________________________
>> cisspstudy mailing list
>> cisspstudy at cccure.org
>> http://cccure.org/mailman/listinfo/cisspstudy_cccure.org
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20091219/ed5cff60/attachment-0001.html>
>
> ------------------------------
>
> Message: 5
> Date: Sat, 19 Dec 2009 15:33:44 -0800
> From: Kristy Seaton <kristy.seaton at gmail.com>
> To: The CISSP Study Mailing list <cisspstudy at cccure.org>
> Subject: Re: [Cisspstudy] questions
> Message-ID:
>        <3568576d0912191533k6cb814fco6f2e27fb25740955 at mail.gmail.com>
> Content-Type: text/plain; charset="iso-8859-1"
>
> fzbrick,
>
> Is that a statement or a question?
>
> If it is a statement, to my knowledge the exams are different so even if
> someone could tell you what was on their test....it may not be what is on
> the next person's test.
>
> If it is a question, then my statement above would still apply.
>
>
> Cheers,
>
>
>
> On Sat, Dec 19, 2009 at 3:16 PM, <fzbrick at gmail.com> wrote:
>
>> That is an exam question.
>>
>> Sent from my iPhone
>>
>> On Dec 19, 2009, at 5:21 PM, Gaurav C <gaurav_va at yahoo.com> wrote:
>>
>> Can you please let me know if it can be said to be ethical if a programmer
>> that work in anti-virus company creates a virus to test his anti virus in an
>> control environment?
>>
>> router works on which layers ?.
>> session layer
>> Transport layer
>> data link layer
>>
>> Gaurav
>>
>> _______________________________________________
>> cisspstudy mailing list
>> cisspstudy at cccure.org
>> http://cccure.org/mailman/listinfo/cisspstudy_cccure.org
>>
>>
>> _______________________________________________
>> cisspstudy mailing list
>> cisspstudy at cccure.org
>> http://cccure.org/mailman/listinfo/cisspstudy_cccure.org
>>
>>
>
>
> --
> "Wisdom is not a product of schooling, but of the lifelong attempt to
> acquire it."
>
> - Albert Einstein
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20091219/bcc07eea/attachment-0001.html>
>
> ------------------------------
>
> Message: 6
> Date: Sat, 19 Dec 2009 16:22:11 -0800 (PST)
> From: Leif Palmer <ldpalmer at sbcglobal.net>
> To: The CISSP Study Mailing list <cisspstudy at cccure.org>
> Subject: Re: [Cisspstudy] questions
> Message-ID: <686485.76379.qm at web180512.mail.gq1.yahoo.com>
> Content-Type: text/plain; charset="iso-8859-1"
>
> question on the exam or not folks, let's be real and help each other; like Kristy said it may not be on the next person's test but shouldn't we be "sharing" info here.
>
> common sense as a teacher, and one with a few years' experience with the DoD, yes it is ethical hacking, in my humble opinion; isn't that what QoS and testing is about. No?company wants to put a "buggy" program out before testing thoroughly. And yes, routers are on layer 3 as are some of the newer switches.
>
> Regards,
>
> Leif P
>
>
>
>
> ________________________________
> From: Kristy Seaton <kristy.seaton at gmail.com>
> To: The CISSP Study Mailing list <cisspstudy at cccure.org>
> Sent: Sat, December 19, 2009 5:33:44 PM
> Subject: Re: [Cisspstudy] questions
>
> fzbrick,
>
> Is that a statement or a question?
>
> If it is a statement, to my knowledge the exams are different so even if someone could tell you what was on their test....it may not be what is on the next person's test.
>
> If it is a question, then my statement above would still apply.
>
>
> Cheers,
>
>
>
>
> On Sat, Dec 19, 2009 at 3:16 PM, <fzbrick at gmail.com> wrote:
>
> That is an exam question.
>>
>>Sent from my iPhone
>>
>>On Dec 19, 2009, at 5:21 PM, Gaurav C <gaurav_va at yahoo.com> wrote:
>>
>>
>>Can you please let me know if it can be said to be ethical if a programmer that work in anti-virus company creates a virus to test his anti virus in an control environment?
>>>
>>>router works on which layers ?.
>>>session layer
>>>Transport layer
>>>data link layer
>>>
>>>Gaurav
>>>
>>>
>>_______________________________________________
>>>cisspstudy mailing list
>>>cisspstudy at cccure.org
>>>http://cccure.org/mailman/listinfo/cisspstudy_cccure.org
>>>
>>_______________________________________________
>>cisspstudy mailing list
>>cisspstudy at cccure.org
>>http://cccure.org/mailman/listinfo/cisspstudy_cccure.org
>>
>>
>
>
> --
> "Wisdom is not a product of schooling, but of the lifelong attempt to acquire it."
>
> - Albert Einstein
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20091219/a4fb4b29/attachment.html>
>
> ------------------------------
>
> _______________________________________________
> cisspstudy mailing list
> cisspstudy at cccure.org
> http://cccure.org/mailman/listinfo/cisspstudy_cccure.org
>
>
> End of cisspstudy Digest, Vol 18, Issue 14
> ******************************************
>

-- 
Thanks & Regards
Vivek Silla