Full Disclosure mailing list archives

Re: future happenings..


From: Roelof Temmingh <roelof () sensepost com>
Date: Tue, 12 Aug 2003 22:04:52 +0200 (SAST)

Hi there..

Some time ago we spoke at the FIRST conference in Ottowa, Canada
(www.first.org) about a very destructive worm.

The paper really focusses on a web server based worm, but ideas and
theories behind it can be applied to any type of worm - Blaster included.

The paper can be found at http://www.sensepost.com/misc/FIRST-final.htm.

Flames to /dev/null, comments welcome...

Regards,
Roelof.

=====================
Roelof Temmingh
roelof () sensepost com
+27 12 667 4737
GMT+2
=====================
On Tue, 12 Aug 2003, Kalleth wrote:

Just reading through how easily this worm (RPC/DCOM/MSBlast) is spreading,
and how widespread it is, and the potential number of infected systems - do
some of you lot think its feasible that sometime in the future someone will
release a worm that DOES completely wipe the hard disks or do something
equally nasty to its host AFTER sending itself on to 'x' recipients? a worm
like that, although i'm hardly qualified to give an opinion, could seriously
affect a very large quantity of home users - the majority of whom never
bother updating their OS from the day its installed from the CD.
Myself, i find a worm that is able to spread this easily as
rather..disturbing.
Does anyone else predict (drum roll and overreacting music please..) a
"doomsday" where nearly every PC running windows (which, lets face it, is
the predominant OS out there at the moment) thats connected to the internet
gets taken offline, hard drives wiped? information loss would be terrible ;p

thoughts?

Tom Russell.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: