Full Disclosure mailing list archives

RE: Centralized server information gathering alternatives / The Bizex worm


From: "J.A. Terranson" <measl () mfn org>
Date: Fri, 27 Feb 2004 23:42:55 -0600 (CST)


On Fri, 27 Feb 2004, Aditya, ALD [Aditya Lalit Deshmukh] wrote:

Most worms today that infect machines try to report back to centralized
servers specified by the creator (to upload/download data).  The only
problem with this approach is that centralized servers can be shut down to
prevent the spread of the worm and cease information gathering.  Now, what
would happen if worms were "smarter" and instead utilized the BitTorrent
networks?  With a small server client built into the worm payload and
50,000-100,000 infected machines, the author(s) (and even the worm itself)
now has access to the data being harvested without the crutch of a single
(or a few) predetermined access points.  Do you guys think this approach
will be utilized in the more advanced worms of tomorrow?

Ideally, they would utilize a distributed and inherently anonymized system,
such as FreeNet: Java - platform independence; the bits in the datastream are
completely distributed (no server that can be whacked) over the whole
network, and no backward trace liabilities.

-- 
Yours,
J.A. Terranson
sysadmin () mfn org

"Unbridled nationalism, as distinguished from a sane and legitimate
patriotism, must give way to a wider loyalty, to the love of humanity as a
whole. Bah'u'llh's statement is: "The earth is but one country, and mankind
its citizens."

The Promise of World Peace
http://www.us.bahai.org/interactive/pdaFiles/pwp.htm


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: