funsec mailing list archives

InfoSec Slammer :-)


From: "Dude VanWinkle" <dudevanwinkle () gmail com>
Date: Tue, 2 May 2006 19:04:49 -0400

Now this is FUNNY =)
-----------------------
http://www.theregister.co.uk/2006/05/02/infosec_insecurity/--------
Trade show gives lessons in insecurity
By John Leyden
\
Infosec may have hosted mass of secure wireless networks last week but
that didn't mean everything was secure.

A quick review of the available wireless networks from Olympia's press
office revealed very few open WLAN networks.
Click Here

However whilst exhibiting at the show, security risk firm McAfee was
able to detect various networks connections that lacked any
encryption, so maybe things weren't as rosy as we first suspected.
Using its Network intrusion prevention product, IntruShield, McAfee
spotted 50,000 instances of attack by the Slammer worm. Slammer was
been pumped across some security vendors' own networks, McAfee
reports.

You'd expect better from Europe's biggest IT security show. With many
open access points available during the show, this attack could have
been easily picked up by visitors to the trade show if they did not
have the relevant security measures in place.

Greg Day, security consultant at McAfee, thundered: "What's even more
disturbing is the nature of this virus; it is almost archaic in
security terms. The 'Slammer worm' has been fixable for ages. In
short, there is no excuse for this to have even been present at the
show, especially by so-called security companies."

Attacks by SQL Slammer shouldn't be confused with successful
infections. Net security services firm MessageLabs, which has a
distinguished pedigree in spotting such outbreaks, told us it hadn't
seen any problems.

------------------------------------

-JP<who apologises for sending el reg to funsec, but this one was too
good to pass up>

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: