full-disclosure - Re: Sasser or other nasty worm needed

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 27 Nov 2006 15:47:20 -0500
From: Valdis.Kletnieks@...edu
To: "K F (lists)" <kf_lists@...italmunition.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Sasser or other nasty worm needed

On Mon, 27 Nov 2006 13:36:39 EST, "K F (lists)" said:
> Dude... settle the hell down.
> 
> I see little problem with this guy doing this on a closed LAN in a lab 
> setting. What part of CLOSED LAB did you miss? Its not like he is 
> intentionally letting it loose on the entire school LAN.

You would have us believe that the guy is clued enough to run a "closed
lab" without screwing up (and there's *lots* of ways to screw up, starting
with forgetting to wipe the drives afterwards, forgetting to disable a
wireless card, forgetting to not plug any of the boxes into the normal net,
forgetting to...).

And yet he's not clued enough to know how to find a copy of Sasser by himself.

There are a lot of people who are of the opinion that "if you have to ask
where to find a copy of Sasser, you're not clued enough to be trusted with
a copy".

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/