Re: Sasser or other nasty worm needed

[Valdis.Kletnieks () vt edu]

On Mon, 27 Nov 2006 17:16:31 EST, Rick said:
> On Mon, 27 Nov 2006, Valdis.Kletnieks () vt edu wrote:
>
> > You would have us believe that the guy is clued enough to run a "closed
> > lab" without screwing up (and there's *lots* of ways to screw up, starting
> > with forgetting to wipe the drives afterwards, forgetting to disable a
> > wireless card, forgetting to not plug any of the boxes into the normal net,
> > forgetting to...).
>
> so when you go to mcdonalds and hand over your $5 for your MCbig meal, do 
> you consider the repercussions of supporting an industry which pays low 
> wages, is under-staffed, and promotes world-hunger by using enough grain 
> to feed a continent, etc...?

WTF does that have to do with the topic?  Unless you want to make the point
that often, the McDonald's staff fails to use a level of food-preparation
hygiene that matches the computer-security hygiene requirements to work with
known malware?

The average McDonald's doesn't have biohazard signs (whether they should is a
different rant) - and even the average doctor's office that *does* have
biohazard signs for used hypodermic needles and the like usually has special
training/procedures for dealing with the stuff.

And labs that do active research on biohazards have even stricter protocols.

(Make note, there *have* been screw-ups in the protocols at places that handle
stuff like Ebola and smallpox - Preston's "The Hot Zone" has a nice story of a
dead monkey with nothing but a plastic garbage bag keeping the nasties in, and
a few years ago, there was a small to-do in one of the labs in England that had
some smallpox...)

> > And yet he's not clued enough to know how to find a copy of Sasser by 
> > himself.

> so what?
> do *you* know where to find a copy?
Yes.
> did you always?
Yes.
> have you always been able to configure a network to talk via EIGRP?
No, because when I first got on the net, RFC1058 was still 4 years in the
future. So it wasn't "always" possible, because the option didn't always
exist.

> > There are a lot of people who are of the opinion that "if you have to ask
> > where to find a copy of Sasser, you're not clued enough to be trusted with
> > a copy".
>
> perhaps the next time you need a doctor, the one you find will laugh at 
> you with the same sense of elitism you demonstrate.

Did I say I was one of the lot of people? Did you notice that I was
replying *in the context of KF's comments* saying "It's cool because it's
in a closed lab?"

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/