Monday, August 22, 2011

Entropy with integers

Recently I've got stuck to code the entropy routine without floating point (without significant loss of precission) here what I ended with:

Tuesday, August 16, 2011

No fucking chance... to AV!

I wish to talk again on topic which I already posted in russian. Wintermute once wrote the influential article ("Polymorphism and grammars") where he expressed his unbelief in polymorphic techniques. No fucking chance, - he said, yeah. From onward many VXers repeated with a mulish obstinacy that polymorphism is dead, though the original Wintermute's conclusion is at least an exaggeration.

A note on Cohen's proof of undecidability of generic virus detection

Not so long ago I have re-read the Cohen's proof of undecidability of computer virus detection and both formal and informal ones smells fishy to me. This fish looks like the Russell's paradox. If Fred talk about viruses in a terms of viral sets (V) and implied that such set is constructed with is-virus predicate (which in turn reads as "v belongs to V set") it results with an impossible set. The same assumption (about undecidability of generic detection) could be proved by reducing it to algorithm equivalence: Cohen showed the viral set with the size of natural numbers; the equivalence of its elements (up to the additional symbol, i.e. the number) is undecidable either. This is more simple than proof by contradiction and stresses that "zeroing" (reducing to a single or a limited number of forms) of metamorphic viruses is undecidable, let alone that it has no chance to end up with a paradox.

Friday, August 12, 2011

Bzz...

I just returned from vacation, but felt myself not very good (yet not bad) due to some IRL troubles. While I was away the Valhalla zine has been released. I promissed to write something for it, but the time had failed me. There is the Ferrie's article called "Frankie say relax" about RELx in the current Virus Bulletin and the updated version with the new feature (and corresponding article) will appear in the EOF#3 (which has been delayed for month).