lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <006401c3f260$a8741d30$1501a8c0@LUFKIN.DPSOL.COM>
Date: Fri, 13 Feb 2004 12:39:03 -0600
From: "Curt Purdy" <purdy@...man.com>
To: "'Gadi Evron'" <ge@...tistical.reprehensible.net>,
   <bugtraq@...urityfocus.com>
Cc: <full-disclosure@...ts.netsys.com>
Subject: RE: [inbox] W2K source "leaked"?


Gadi Evron wrote:

> I never believed in 0-days.
<snip>
> but now... I don't know.

I can assure you 0-days do and have existed for a long time. In the past the
true l33t h4x0rs would turn their creations over to the kiddies when they
came up with something better to use.  Today they do it when a patch has
been released or is immanent.  In fact today, they are often nicely
pre-compiled.

I had a copy of dcom.exe several days prior to MS releasing the RPC patch.
Within a day of the release, it was all over irc and even some lists.  I
don't think many people realize how many tens or even hundreds of thousands
of zombies were created by all the kiddies typeing dcom.exe as fast as their
little fingers could go.  MSBlast was likely the best thing that could have
happened to force patching before the boxes were hijacked and patched by an
intruder.

Curt Purdy CISSP, GSEC, MCSE+I, CNE, CCDA
Information Security Engineer
DP Solutions

----------------------------------------

If you spend more on coffee than on IT security, you will be hacked.
What's more, you deserve to be hacked.
-- White House cybersecurity adviser Richard Clarke

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ