[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <2d6724810902192013g5a18fabes891d286e61dc60bd@mail.gmail.com>
Date: Thu, 19 Feb 2009 23:13:38 -0500
From: T Biehn <tbiehn@...il.com>
To: full-disclosure <Full-Disclosure@...ts.grok.org.uk>
Subject: Oh Yeah, botnet communications
You know how the current amateur botnet offerings are basing domain lists
off the current time to allow the 'good guys' to prepare?
Why not base the seed off something like a news RSS feed? I asked some
whitehats when I was ruined in Washington DC and they couldn't tell me.
News isn't predictable but is globally shared on a given day.
-Travis
Content of type "text/html" skipped
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists