The NoAH Blog » taint tracking http://blogs.fp6-noah.org/noah an ark of honeypot knowledge... Tue, 07 Jul 2009 14:35:20 +0000 http://wordpress.org/?v=2.8.4 en hourly 1 Argos 0.4.1 released http://blogs.fp6-noah.org/noah/argos-041-released/ http://blogs.fp6-noah.org/noah/argos-041-released/#comments Wed, 21 May 2008 23:39:34 +0000 Vrije Universiteit, Amsterdam http://blogs.fp6-noah.org/noah/argos-041-released/ The new version of Argos (0.4.1) contains bug fixes related with taint tracking. It is recommended to update to the latest version of Argos, since it solves issues with reported false positives. Checking the CALL instruction for tainted operands, has also been re-enabled, since it seems it does not cause problems with windows systems anymore. The use of a whitelist is not necessary as well, since the false positives reported by 2.6.* linux kernels are also solved. Finally, crashes reported with windows 2000 guest systems, seem to be also solved.

If any of the users discovers false positives, after these changes please notify the developers immediately. You can get argos from the VU gforge site.

 

]]> http://blogs.fp6-noah.org/noah/argos-041-released/feed/ 0