Re: [ISN] Code Red the Dracula of worms?

From: InfoSec News (isnat_private)
Date: Wed Aug 29 2001 - 05:23:03 PDT

  • Next message: InfoSec News: "[ISN] Hacker Breaches Payments Site Webcertificate.com" 

    Forwarded from: "Jay D. Dyson" <jdysonat_private>

-----BEGIN PGP SIGNED MESSAGE-----

On Tue, 28 Aug 2001, InfoSec News wrote: 

> A new permutation of the Code Red II worm was discovered on Friday, and
> experts say that Code Red is now unlikely ever to disappear. 

	I seem to recall the ill-informed saying the same thing about the
Morris worm in the 1980s.  Anyone had that worm knocking on their ports
lately?

> "This is pretty much noise level for Code Red II and CodeRed.d--it's not
> going to get any better or worse and will stay like this forever,"  said
> Thompson. "Those machines that have not yet been patched never will be,
> meaning that the worm is here to stay." 

	Anyone who uses words like "forever" and "never" in this volatile
world of rapidly-changing technology only demonstrates how ill-informed
they are.  The notion that systems that haven't been patched "never will
be" is a presumption based more on frustration than fact.  And the notion
of permanence of *any* technology or problem (beyond their mere generic
existence of phenomena) demonstrates an incomprehensible lack of
understanding not only of computer history, but history itself. 

> According to Thompson, four to five new worms are created by accident
> on the Internet every day

	By *accident*?  I'd love to see examples of this.

- -Jay

  (    (                                                          _______
  ))   ))   .--"There's always time for a good cup of coffee"--.   >====<--.
C|~~|C|~~| (>------ Jay D. Dyson -- jdysonat_private ------<) |    = |-'
 `--' `--'  `-------- Real men prefer full disclosure. --------'  `------'

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: See http://www.treachery.net/~jdyson/ for current keys.

iQCVAwUBO4uw7LlDRyqRQ2a9AQFssQP/YSkdLCCf9kDDq62Y+FFNdPfjvF7CD8DY
Vv2epiJJmWBoV6/EUH4oqPEE71wgDsJ3jSzcF/1QZv6Bn4M0JHaLsf+tgfsa/UQr
3jcNvTA/KWoIhL2AYPKO4pFVe98MmlyPtHK/HAEVz+OfqQw9B252qEVlV4fG/YZZ
PtmOt03HuHI=
=r1dj
-----END PGP SIGNATURE-----



-
ISN is currently hosted by Attrition.org

To unsubscribe email majordomoat_private with 'unsubscribe isn' in the BODY
of the mail.

    This archive was generated by hypermail 2b30 : Wed Aug 29 2001 - 07:51:33 PDT