Snip....

"Obviously, I want to decrease that number," says Muniz. To that end, the company is working to refine its technique, so as to fly stealthily beneath the radar of firewalls and intrusion detection systems. "It's a goal we have," says Muniz. "Someday I'd like to get the system to the point where we don't set off anybody's alarms."

..end

Very scary when one considers what he is saying in that statement, they want to "fly stealthily beneath the radar". How nice of them to consider people, not by issuing statements or asking permission before scanning a network, the above statement simply says "we want to do it without any one knowing and we will do it whether they like it or not".

Personally, I would be advising any customer to implement access control measures to deny access to their systems by Qouva's IP ranges. I would also suggest to Quova that they publish a list of the source IP's used for the scans etc.

Scary.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/56/2384#2384