full-disclosure - Re: Sasser

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <380-220061122814481822@M2W039.mail2web.com>
Date: Tue, 28 Nov 2006 09:48:01 -0500
From: "ericscher@....com" <ericscher@....com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Sasser

Matt -

Your comments are entirely logical, reasonable and correct.

They are also completely unrelated to the way school systems actually
function.

That aside...
Ask yourself this: Why is this guy asking for help HERE?
As opposed to seeking the help of the sysadmins that the taxpayers have
already provided for the schools.

There are three likely explanations:
1. He already asked and was firmly told NO.
2. He knows better than to ask.
3. He is not who he says he is.

What people do with hardware that THEY own is their business.
What people do with OUR hardware is OUR business.

============================================================
From: Matthew Flaschen <matthew.flaschen@...ech.edu>
Subject: Re: Sasser or other nasty worm needed

What budget?  Every school that would have a networking 
class also has obsolete computers.  Take a dozen, reformat
them, put on an unpatched version of Windows, pull out 
or disable wifi, and connect them all to a switch 
(also probably available second-hand).  Ensure neither 
computers nor switch are connected to any other network.  
Sure, you have to be sure not to f* it up, but it doesn't 
cost anything.  Set-up sasser on one by moving it off a CD-R.  
Wait. :)  This should cost little or nothing.

Matt Flaschen
============================================================

--------------------------------------------------------------------
mail2web - Check your email from the web at
http://mail2web.com/ .

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/