nanog mailing list archives
Banc of America Article
From: Alex Rubenstein <alex () nac net>
Date: Sat, 25 Jan 2003 17:45:16 -0500 (Eastern Standard Time)
http://biz.yahoo.com/rb/030125/tech_virus_boa_1.html Let's make the assumption that the outage of ATM's that BoA suffered was caused by last nights 'SQL Slammer' virus. The following things can then be assumed: a) BoA's network has Microsoft SQL Servers on them. b) BoA has not applied SP3 (available for a week) or the patch for this particular problem (SQL Slammer) (available for many months). c) somehow, this attack spawned on the public internet made it's way to BoA's SQL servers, bypassing firewalls (did they have firewalls?). Another article states, "Bank of America Corp., one of the nation's largest banks, said many customers could not withdraw money from its 13,000 ATM machines because of technical problems caused by the attack. A spokeswoman, Lisa Gagnon, said the bank restored service to nearly all ATMs by late Saturday afternoon and that customers' money and personal information had not been at risk." Does anyone else, based upon the assumptions above, believe this statement to be patently incorrect (specifically, the part about 'personal information had not been at risk.') ? I find these statement made by BoA, based upon assumptions which are probably correct, to be very scary. Comments? -- Alex Rubenstein, AR97, K2AHR, alex () nac net, latency, Al Reuben -- -- Net Access Corporation, 800-NET-ME-36, http://www.nac.net --
Current thread:
- Banc of America Article Alex Rubenstein (Jan 25)
- Re: Banc of America Article Jack Bates (Jan 25)
- Re: Banc of America Article Sean Donelan (Jan 25)
- Re: Banc of America Article alex (Jan 27)
- Re: Banc of America Article Avleen Vig (Jan 25)
- Re: Banc of America Article Ryan Fox (Jan 25)
- Re: Banc of America Article Alex Rubenstein (Jan 25)
- Re: Banc of America Article E.B. Dreger (Jan 25)
- Re: Banc of America Article Dave Howe (Jan 26)
- Re: Banc of America Article Ryan Fox (Jan 25)
- Re: Banc of America Article Wayne E. Bouchard (Jan 25)