[Laszlo-dev] Fwd: New Post/Thread Notification: LZX Coding Help
jgrandy at laszlosystems.com
Wed Mar 15 01:33:53 EST 2006
Briefly, I'm in touch with McAfee and doing my best to escalate. If
anyone has a contact there, I'd appreciate help getting to someone
knowledgeable. Hopefully when we talk to them we can get more
information. In the mean time QA is trying to reproduce the problem
On Mar 14, 2006, at 8:40 PM, P T Withington wrote:
> Possibly they are just doing a pattern match that matches against
> us. We generate 'more sophisticated' code that the flex compiler,
> so it seems plausible that a naive pattern matcher might
> incorrectly flag our code.
> If there is any way we can get the actual pattern they are looking
> for that would help. Or perhaps they could tell us what in
> clockblox looks suspicious and we could disassemble that and show
> them that it is not.
> On 2006-03-14 18:11 EST, Jim Grandy wrote:
>> McAfee added rules to check for the "Exploit-SWF" trojan last
>> Wednesday. They are firing against OpenLaszlo-compiled code.
>> I've got an email in to McAfee about this now, and I'm working
>> with Mark Davis to see what we can find out about it.
>> Up to this thread, we've only heard reports of it targeting
>> clockblox, which is run against LPS 2.1.2 and targets Flash 5.
>> It's more worrying if McAfee is triggering on something like
>> I'll post something on the forum thread.
>> On Mar 14, 2006, at 2:06 PM, Henry Minsky wrote:
>>> There've been two threads about this, seems to be something in a
>>> new update of that virus scanner. What is the known issue? Is it
>>> just that the systems have an out of date version of the Flash
>>> player installed? Or do the virus scanners target any app which
>>> is tagged as SWF6?
>>> ---------- Forwarded message ----------
>>> From: Laszlo Systems Developers Forums Mailer
>>> <www at laszlosystems.com >
>>> Date: Mar 14, 2006 4:08 PM
>>> Subject: New Post/Thread Notification: LZX Coding Help
>>> To: hminsky at laszlosystems.com
>>> dbuchal has just posted in the LZX Coding Help forum of Laszlo
>>> Systems Developers Forums under the title of High Priority McAfee
>>> This thread is located at http://www.laszlosystems.com/developers/
>>> Henry Minsky
>>> Software Architect
>>> hminsky at laszlosystems.com
>>> Laszlo-dev mailing list
>>> Laszlo-dev at openlaszlo.org
>> Laszlo-dev mailing list
>> Laszlo-dev at openlaszlo.org
More information about the Laszlo-dev