Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!usc!cs.utexas.edu!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!cert.sei.cmu.edu!krvw
From: p1@arkham.wimsey.bc.ca (Rob Slade)
Newsgroups: comp.virus
Subject: Re: Trojan version of VIRUSCAN version 78 (PC)
Message-ID: <0001.9105201353.AA06044@ubu.cert.sei.cmu.edu>
Date: 16 May 91 23:50:01 GMT
Sender: Virus Discussion List <VIRUS-L@LEHIIBM1>
Lines: 25
Approved: krvw@sei.cmu.edu

PHYS169@csc.canterbury.ac.nz (Mark Aitchison, U of Canty; Physics) writes:

> > NOT correct.  McAfee Associate's Serial Number is NWM405.
>
> This worries me. Could somebody explain what good the PKUNZIP
> authentication system should be, as it obviously isn't providing
> enough warning here. (Who would know, and think of looking at, the
> serial number? Probably few people).

Exactly the point ~made in one recent posting that examined the various
mathods McAfee Associates uses to try to maintain the integrity of the
programs.

The "authentic verification" only attaches a code which (more or less)
confirms that the archive was packed up by an identifiable person.  I am
sure that McAfee Associates is even now burning up the phone lines to
Phil Katz demanding what twit registered a copy of PKZIP under the name
of their company with that serial number.

=============
Vancouver          p1@arkham.wimsey.bc.ca   | "If you do buy a
Institute for      Robert_Slade@mtsg.sfu.ca |  computer, don't
Research into      (SUZY) INtegrity         |  turn it on."
User               Canada V7K 2G6           | Richards' 2nd Law
Security                                    | of Data Security