full-disclosure - Mydoom: Perfect Storm Averted or Just Ahead?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20040129144812.290c7001.collin@betaversion.net>
From: collin at betaversion.net (Collin R. Mulliner)
Subject: Mydoom: Perfect Storm Averted or Just Ahead?

Hi,

> That'd be an interesting defense.  Has anyone tried renaming
> their incoming MX machine so that it includes one of these strings?

I think all email addresses which contain the unwanted strings are
filtered out before asking for the mx host for a specific domain - so
this defense wont work. Everything else would be to slow.

... Collin

-- 
Collin Mulliner <collin@...aversion.net>
BATAVERSiON Systems [www.betaversion.net]
fom: To know recursion, you must first know recursion.