full-disclosure - DCOM/RPC story (Analogy)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: khermansen at ht-technology.com (Kristian Hermansen)
Subject: DCOM/RPC story (Analogy)

Yeah, you are correct about him still being responsible in legal terms...but
I still think that he is getting more than he deserves.  And another great
point you made was this:

> he is going to pay for the the MS Blaster AND sobig virus attacks because
> I'm sure most people don't even know or remember the difference
> between the two of them.
>
> jb

This is most likely true and is very sad.  Yes, the kid committed a crime,
but the punishment far exceeds the crime.  Enron executives lie/cheat/steal,
governments execute/murder/overthrow, Martha Stewart intentionally swindles
stock holders out of mucho ca$h and none of these people have received the
punishment that they all deserve.  The sad truth is that money talks.
Wealth is power in this world and if you don't have it you're just another
cow in the field...being herded along by thoses who have wealth and power -
it's fu3king sad...

Kris Hermansen



----- Original Message ----- 
From: "Jennifer Bradley" <jenbradley@...mail.co.za>
To: <full-disclosure@...ts.netsys.com>
Sent: Monday, September 01, 2003 2:09 AM
Subject: Re: [Full-Disclosure] DCOM/RPC story (Analogy)


> >I also agree with you.  The kid is guilty of nothing more than
> >"Unethical use of a hex editor".  And here's my MAIN FUCKING
> >POINT SO LISTEN UP ALL OF YOU:
> >
> >THE 7000 COMPUTERS THAT HE SUPPOSEDLY INFECTED WOULD HAVE BEEN
> >INFECTED BY THE "ORIGINAL" WORM HAD THEY NOT BEEN COMPROMISED
> >BY HIS VARIANT FIRST.  SO WHAT'S THE FUCKING CRIME?  READ BELOW...
> [snip]
>
> Unfortunately, this fails one of the very first questions given to law
> students:
>
> If a person jumps off a building to commit suicide, and you take a
> rifle and shoot him in the head before he reaches the ground, are you
> guilty of a crime?
>
> The answer is yes, you murdered him.  It doesn't matter that he was
> going to die anyway.  You could argue that everyone is eventually
> going to die anyway, but it still doesn't make it right for you to go
> out and murder someone.
>
> So, the simple fact that these 7000 machines were eventually going to
> be infected doesn't mean squat in court, and just about every lawyer
> is going to know this.  The fact is this kid was responsible for these
> 7000 computers being infected, and, like some people are saying, he is
> going to pay for the the MS Blaster AND sobig virus attacks because
> I'm sure most people don't even know or remember the difference
> between the two of them.
>
> jb
> _______________________________________________________________________
> Cool Connection, Cool Price, Internet Access for R59 monthly @ WebMail
> http://www.webmail.co.za/dialup/
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html