full-disclosure - Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: brett at softwarecreations.co.nz (Brett Moore)
Subject: Re: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!

> An additional ethical issue would arise if the worm was written
> as a proof of concept
> and was never meant to 'escape' into the wild....

Thats a good point. What if one was to write a worm to reproduce and
innoculate their own systems. IP Based, can't get out. A user plugs a laptop
in, worm jumps ship, user takes laptop and plugs into another network, worm
is loose?.

Could a strikeback worm be 'released' and claim to be an innocent escape or
a bug?

> -----Original Message-----
> From: full-disclosure-admin@...ts.netsys.com
> [mailto:full-disclosure-admin@...ts.netsys.com]On Behalf Of Albert
> Sunseri
> Sent: Tuesday, 28 January 2003 13:10
> To: Richard M. Smith
> Cc: jasonc@...ence.org; 'Jay D. Dyson'; 'Bugtraq'; 'Full-Disclosure'
> Subject: [Full-Disclosure] Re: MS SQL WORM IS DESTROYING INTERNET BLOCK
> PORT 1434!

 abbreviated
>
> An additional ethical issue would arise if the worm was written
> as a proof of concept
> and was never meant to 'escape' into the wild....
>
> Just tossin pennies,
> -------------
> Albert Sunseri
> Information want to be priceless
> sunseri@...i.net
>