Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]

Re: [Full-disclosure] Sasser or other nasty worm needed

Subject: Re: [Full-disclosure] Sasser or other nasty worm needed
Date: Mon, 27 Nov 2006 17:39:00 -0500
On Mon, 27 Nov 2006 17:16:31 EST, Rick said:

On Mon, 27 Nov 2006, Valdis.Kletnieks@vt.edu wrote:

You would have us believe that the guy is clued enough to run a "closed
lab" without screwing up (and there's *lots* of ways to screw up, starting
with forgetting to wipe the drives afterwards, forgetting to disable a
wireless card, forgetting to not plug any of the boxes into the normal net,
forgetting to...).

so when you go to mcdonalds and hand over your $5 for your MCbig meal, do 
you consider the repercussions of supporting an industry which pays low 
wages, is under-staffed, and promotes world-hunger by using enough grain 
to feed a continent, etc...?

WTF does that have to do with the topic?  Unless you want to make the point
that often, the McDonald's staff fails to use a level of food-preparation
hygiene that matches the computer-security hygiene requirements to work with
known malware?

The average McDonald's doesn't have biohazard signs (whether they should is a
different rant) - and even the average doctor's office that *does* have
biohazard signs for used hypodermic needles and the like usually has special
training/procedures for dealing with the stuff.

And labs that do active research on biohazards have even stricter protocols.

(Make note, there *have* been screw-ups in the protocols at places that handle
stuff like Ebola and smallpox - Preston's "The Hot Zone" has a nice story of a
dead monkey with nothing but a plastic garbage bag keeping the nasties in, and
a few years ago, there was a small to-do in one of the labs in England that had
some smallpox...)

And yet he's not clued enough to know how to find a copy of Sasser by 
himself.

so what?
do *you* know where to find a copy?
Yes.
did you always?
Yes.
have you always been able to configure a network to talk via EIGRP?
No, because when I first got on the net, RFC1058 was still 4 years in the
future. So it wasn't "always" possible, because the option didn't always
exist.

There are a lot of people who are of the opinion that "if you have to ask
where to find a copy of Sasser, you're not clued enough to be trusted with
a copy".

perhaps the next time you need a doctor, the one you find will laugh at 
you with the same sense of elitism you demonstrate.

Did I say I was one of the lot of people? Did you notice that I was
replying *in the context of KF's comments* saying "It's cool because it's
in a closed lab?"

Attachment: pgpZpGhc0S39G.pgp
Description: PGP signature

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
<Prev in Thread] Current Thread [Next in Thread>