Re: [Full-Disclosure] RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!

From: Ron DuFresne (dufresneat_private)
Date: Sat Jan 25 2003 - 17:01:18 PST

  • Next message: Charles Miller: "Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!"

    You'll find that you underestimate the number of banks and credit related
    transactions that use internet connectivity to transact transfers and
    payment activity.  Pay attention next time you use a ATM or credit card at
    the gas pumps or the grocery, or a card in those ATM's in various malls
    and stores.  You'll hear the modems in many dialing during the
    'authorization' phase of the transaction, and few are dialing
    into a private networked system.
    
    
    
    Thanks,
    
    Ron DuFresne
    
    
    On Sat, 25 Jan 2003, Jason Coombs wrote:
    
    > Bank of America should never have allowed their ATM network to rely on
    > routes that could be impacted by non-ATM network computer systems.
    >
    > That Sapphire might have had this effect makes the sensibility behind
    > writing and releasing it even more apparent, if this was in fact defensive
    > work of a government agency as my speculation suggested.
    >
    > Jason Coombs
    > jasoncat_private
    >
    > -----Original Message-----
    > From: Richard M. Smith [mailto:rmsat_private]
    > Sent: Saturday, January 25, 2003 1:11 PM
    > To: jasoncat_private; 'Jay D. Dyson'; 'Bugtraq'; 'Full-Disclosure'
    > Subject: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!
    >
    >
    > However, this worm might not be so harmless as it appears because of
    > collateral damage:
    >
    >    Bank of America ATMs Disrupted by Virus
    >
    >
    > _______________________________________________
    > Full-Disclosure - We believe in it.
    > Charter: http://lists.netsys.com/full-disclosure-charter.html
    >
    
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    "Cutting the space budget really restores my faith in humanity.  It
    eliminates dreams, goals, and ideals and lets us get straight to the
    business of hate, debauchery, and self-annihilation." -- Johnny Hart
    	***testing, only testing, and damn good at it too!***
    
    OK, so you're a Ph.D.  Just don't touch anything.
    
    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html
    



    This archive was generated by hypermail 2b30 : Sat Jan 25 2003 - 17:39:59 PST