full-disclosure - Re: Oh Yeah, botnet communications

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <20090220044639.C81EF28042@smtp.hushmail.com>
Date: Thu, 19 Feb 2009 23:46:39 -0500
From: "Elazar Broad" <elazar@...hmail.com>
To: full-disclosure@...ts.grok.org.uk, tbiehn@...il.com
Subject: Re: Oh Yeah, botnet communications

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

"You know how the current amateur botnet offerings are basing
domain lists off the current time to allow the 'good guys' to
prepare?"

Shhh, your gonna wake the "<insert A/V company here> writes all the
malware" theorists...


On Thu, 19 Feb 2009 23:13:38 -0500 T Biehn <tbiehn@...il.com> wrote:
>You know how the current amateur botnet offerings are basing
>domain lists
>off the current time to allow the 'good guys' to prepare?

>Why not base the seed off something like a news RSS feed? I asked
>some
>whitehats when I was ruined in Washington DC and they couldn't
>tell me.
>
>News isn't predictable but is globally shared on a given day.
>
>-Travis
-----BEGIN PGP SIGNATURE-----
Charset: UTF8
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 3.0

wpwEAQECAAYFAkmeNYoACgkQi04xwClgpZhjdAP/Uz4IUuJPRrNJbbuZW5zaSllvBUZM
I0MSZCD3KYViEWbDSzBWIYBY67DHTl2SAz5n91aG3Xswd+AYj//9uMVPSBg0OJ/DcXX1
FItea1gc6PPeNMLWAXMrLcbP2wCwzDlrzjzU4TRmUGUXQBSWq9E/RccqI2QvzpqvvBKu
Nfr1JeA=
=0Rjf
-----END PGP SIGNATURE-----

--
Earn your medical billing and coding degree, 100% online! Enroll now.
 http://tagline.hushmail.com/fc/BLSrjkqfMmgJRBfXoys7dlGxe42aOzYO2gb37Tz3VOR2i51BEqQXYN67V8X/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/