RE: [Full-Disclosure] Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!

From: Brett Moore (brettat_private)
Date: Mon Jan 27 2003 - 16:42:51 PST

  • Next message: Alex Loots: "Incorrect Certificate Validation in Java Secure Socket Extension"

    > An additional ethical issue would arise if the worm was written
    > as a proof of concept
    > and was never meant to 'escape' into the wild....
    
    Thats a good point. What if one was to write a worm to reproduce and
    innoculate their own systems. IP Based, can't get out. A user plugs a laptop
    in, worm jumps ship, user takes laptop and plugs into another network, worm
    is loose?.
    
    Could a strikeback worm be 'released' and claim to be an innocent escape or
    a bug?
    
    
    > -----Original Message-----
    > From: full-disclosure-adminat_private
    > [mailto:full-disclosure-adminat_private]On Behalf Of Albert
    > Sunseri
    > Sent: Tuesday, 28 January 2003 13:10
    > To: Richard M. Smith
    > Cc: jasoncat_private; 'Jay D. Dyson'; 'Bugtraq'; 'Full-Disclosure'
    > Subject: [Full-Disclosure] Re: MS SQL WORM IS DESTROYING INTERNET BLOCK
    > PORT 1434!
    
     abbreviated
    >
    > An additional ethical issue would arise if the worm was written
    > as a proof of concept
    > and was never meant to 'escape' into the wild....
    >
    > Just tossin pennies,
    > -------------
    > Albert Sunseri
    > Information want to be priceless
    > sunseriat_private
    >
    
    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html
    



    This archive was generated by hypermail 2b30 : Mon Jan 27 2003 - 17:20:38 PST