Re: and here are some answers [was: Quarantine your infected users spreading malware]

[bmanning () vacation karoshi com]

On Tue, Feb 21, 2006 at 12:04:17AM -0600, Rob Thomas wrote:
> ]     true enough.  but "auntie jane" doesn't have linux/unix web server(s)
> ]     or router(s) (other than the one provided by her ISP and managed by them)
> ]     and has zero clue about overly permissive <service> machines.
>
> Agreed.  Instead all of her financial records are on those
> unix web/database servers, or transit through those routers,
> etc.  There's a reason why such devices are popular with
> the criminals.  :(


        whats the objective?  ID theft, fiscal mahem - go for the 
        infrastructure stuff (like you say). lowest visable impact
        for very high fiscal return.
        destablize the trust model, perceptions of availability?
        large zombie packs might be your best bet.  
        (we're not in it for the money, we want social change!)

> -- 
> Rob Thomas
> Team Cymru
> http://www.cymru.com/
> ASSERT(coffee != empty);