Re: Another new worm???

[dknaack () RDTECH COM (David Knaack)]

From: Jason Legate <jlegate () sitesmith com>
> AFAIK, the TODs are not signed, but after speaking with an ex-aol
> employee, she has said that they use a private lan, with a backdoor phone
> number.

Such a setup would probably require a fairly involved effort to
compromise.  Professional black hat stuff I guess.

A more likely senerio would be to attack groups of users by routing
their traffic to server that understands AOLP and delivers the TOD
after the inital connection, then forces them to disconnect.
Subsequent connections would be to the real AOL server.

DK