Trusting WoW and trusting Warden-downloaded code is two completely different things.

WoW requires a conscious effort to patch, and you can verify the installed material after you've patched.

That means that you can *check* what your local WoW-copy does.

Warden, OTOH, installs anything it wants (I'm not even sure it stores it in a permanent file locally?), without you even noticing. This way, you never *knew* you got something new installed, you had no chance to verify the program that's running, etcetera.

Basically, WoW never changes unless you let it, Warden allows it to do so.

That's why it's "untrusted and unknown".

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/34/83#83