full-disclosure - Re: Sasser

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <456D0B19.1060004@gatech.edu>
Date: Tue, 28 Nov 2006 23:22:49 -0500
From: Matthew Flaschen <matthew.flaschen@...ech.edu>
To: ericscher@....com,
	full-disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: Sasser

You're right that this isn't normally how school procurement works.
However, it is possible.  I also don't think it would be the sysadmin's
job to help with a networking class.

Matt

ericscher@....com wrote:
> 
> Matt -
> 
> Your comments are entirely logical, reasonable and correct.
> 
> They are also completely unrelated to the way school systems actually
> function.
> 
> 
> That aside...
> Ask yourself this: Why is this guy asking for help HERE?
> As opposed to seeking the help of the sysadmins that the taxpayers have
> already provided for the schools.
> 
> There are three likely explanations:
> 1. He already asked and was firmly told NO.
> 2. He knows better than to ask.
> 3. He is not who he says he is.
> 
> What people do with hardware that THEY own is their business.
> What people do with OUR hardware is OUR business.
> 
> ============================================================
> From: Matthew Flaschen <matthew.flaschen@...ech.edu>
> Subject: Re: Sasser or other nasty worm needed
> 
> What budget?  Every school that would have a networking 
> class also has obsolete computers.  Take a dozen, reformat
> them, put on an unpatched version of Windows, pull out 
> or disable wifi, and connect them all to a switch 
> (also probably available second-hand).  Ensure neither 
> computers nor switch are connected to any other network.  
> Sure, you have to be sure not to f* it up, but it doesn't 
> cost anything.  Set-up sasser on one by moving it off a CD-R.  
> Wait. :)  This should cost little or nothing.
> 
> Matt Flaschen
> ============================================================
> 
> --------------------------------------------------------------------
> mail2web - Check your email from the web at
> http://mail2web.com/ .
> 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
> 



Download attachment "signature.asc" of type "application/pgp-signature" (251 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/