lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <1989F6F0D512A7428593D724A81986F023913C@waprdms01.gsm1900.org>
From: Michael.Schmidt at T-Mobile.com (Schmidt, Michael R.)
Subject: Calcuating Loss

I think that part of the evolution is to lock people who create these things up for a *very* long time.  It will deter the script kittens when they start to find that their computers are confiscated and their parents homes are sold to pay for the "loss" incurred by there stupidity.  The real black hats will be deterred when 20 FBI/CIA whoever agents drag them from their homes at gunpoint with the handcuffs tight around there wrists.

The consequences need to be severe enough.  In order to accomplish that our infrastructure has got to support the basic ability to find people who cause problems.  Anonymity is not an option.

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com [mailto:full-disclosure-admin@...ts.netsys.com]On Behalf Of Frank Knobbe
Sent: Tuesday, May 11, 2004 1:43 PM
To: Valdis.Kletnieks@...edu
Cc: Full-Disclosure
Subject: Re: [Full-Disclosure] Calcuating Loss

On Tue, 2004-05-11 at 12:52, Valdis.Kletnieks@...edu wrote:
> We're fast approaching the point where a site can't do anything resembling a
> reasonable testing process and complete it before the worm arrives.

I think we're getting close to the point where we realize that patches
and virus signatures and such are not sufficient to protect networks
from worms and viruses.

I meant to bring this up a month or so ago. After the NetSky.A-Z and
Bagle.A-Z and NextOne.A-Z, people should start realizing that they need
to escape the vicious circle of updating sigs and patching. Different,
deeper reaching measures need to be taken to reduce susceptibility to
these issues. Architectural changes are necessary to remove the
capabilities for these things to run, spread and thrive, not more
patches and virus signatures.

Sooner or later, individuals will find the answer. It's evolution in the
digital world.

Regards,
Frank


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ