Re: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!

[Ron DuFresne <dufresne () winternet com>]

You'll find that you underestimate the number of banks and credit related
transactions that use internet connectivity to transact transfers and
payment activity.  Pay attention next time you use a ATM or credit card at
the gas pumps or the grocery, or a card in those ATM's in various malls
and stores.  You'll hear the modems in many dialing during the
'authorization' phase of the transaction, and few are dialing
into a private networked system.



Thanks,

Ron DuFresne


On Sat, 25 Jan 2003, Jason Coombs wrote:

> Bank of America should never have allowed their ATM network to rely on
> routes that could be impacted by non-ATM network computer systems.
>
> That Sapphire might have had this effect makes the sensibility behind
> writing and releasing it even more apparent, if this was in fact defensive
> work of a government agency as my speculation suggested.
>
> Jason Coombs
> jasonc () science org
>
> -----Original Message-----
> From: Richard M. Smith [mailto:rms () computerbytesman com]
> Sent: Saturday, January 25, 2003 1:11 PM
> To: jasonc () science org; 'Jay D. Dyson'; 'Bugtraq'; 'Full-Disclosure'
> Subject: RE: MS SQL WORM IS DESTROYING INTERNET BLOCK PORT 1434!
>
>
> However, this worm might not be so harmless as it appears because of
> collateral damage:
>
>    Bank of America ATMs Disrupted by Virus
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
        ***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html