RE: A code red that could bring down the net?

From: Dom De Vitto (domat_private)
Date: Mon Jul 23 2001 - 14:36:23 PDT

  • Next message: cami: "telnetd exploit code"

    I think a guy called William 'T' Morris may have had this idea first.
    Allegedly :-)
    
    History. History. History.
    
    Dom
    
    -----Original Message-----
    From: Jason Lewis [mailto:jlewisat_private]
    Sent: 23 July 2001 06:08
    To: 'josh abulamhammedramashi'; vuln-devat_private;
    SECURITY-BASICSat_private
    Subject: RE: A code red that could bring down the net?
    
    
    The internet isn't a big hub.  If I connect a machine with an IP that is
    identical to yours, I don't knock you off the net.  There is routing and
    switching involved.  If you change your IP to 192.168.1.1 (example IP), the
    entire net needs to know how to get to your IP.  Just changing it doesn't
    make that happen.  Changing IP's isn't a DDoS.
    
    How about this instead?  A worm that is not only windows, but also unix
    based.  It carries payload for each OS.  It works similar to CodeRed and
    replicates itself.  It also installs a zombie client and creates backdoors.
    Imagine a worm that wraps all the viruses in the 16 months into one.  What
    if it actively searched out victims while also using Outlook to propagate
    itself.
    
    BTW, I want the 5 minutes back that it took me to read that paper.  I also
    didn't cc Mark, he probably gets enough junk mail.
    
    Jason Lewis
    http://www.packetnexus.com
    It's not secure "Because they told me it was secure".
    The people at the other end of the link know less
    about security than you do. And that's scary.
    
    
    
    
    
    -----Original Message-----
    From: josh abulamhammedramashi [mailto:whoredwareat_private]
    Sent: Sunday, July 22, 2001 10:42 PM
    To: vuln-devat_private; SECURITY-BASICSat_private
    Cc: Marc Maiffret
    Subject: A code red that could bring down the net?
    
    
    I just wanted some input on this paper I wrote, It'd
    be nice for some input and constructive critiscm. I'd
    like to get this to eventually make the guest writer
    section on security focus. You can view it at
    http://www.whoredware.com/codered.html
    
    thanks-
    enigmabomb
    enigmabombat_private
    
    p.s. sorry about the cross posts, but this seems
    pertinent to both.
    
    
    
    __________________________________________________
    Do You Yahoo!?
    Make international calls for as low as $.04/minute with Yahoo! Messenger
    http://phonecard.yahoo.com/
    



    This archive was generated by hypermail 2b30 : Mon Jul 23 2001 - 22:53:44 PDT