Full Disclosure mailing list archives
RE: Calcuating Loss
From: "Schmidt, Michael R." <Michael.Schmidt () T-Mobile com>
Date: Tue, 11 May 2004 15:02:30 -0700
I think that part of the evolution is to lock people who create these things up for a *very* long time. It will deter the script kittens when they start to find that their computers are confiscated and their parents homes are sold to pay for the "loss" incurred by there stupidity. The real black hats will be deterred when 20 FBI/CIA whoever agents drag them from their homes at gunpoint with the handcuffs tight around there wrists. The consequences need to be severe enough. In order to accomplish that our infrastructure has got to support the basic ability to find people who cause problems. Anonymity is not an option. -----Original Message----- From: full-disclosure-admin () lists netsys com [mailto:full-disclosure-admin () lists netsys com]On Behalf Of Frank Knobbe Sent: Tuesday, May 11, 2004 1:43 PM To: Valdis.Kletnieks () vt edu Cc: Full-Disclosure Subject: Re: [Full-disclosure] Calcuating Loss On Tue, 2004-05-11 at 12:52, Valdis.Kletnieks () vt edu wrote:
We're fast approaching the point where a site can't do anything resembling a reasonable testing process and complete it before the worm arrives.
I think we're getting close to the point where we realize that patches and virus signatures and such are not sufficient to protect networks from worms and viruses. I meant to bring this up a month or so ago. After the NetSky.A-Z and Bagle.A-Z and NextOne.A-Z, people should start realizing that they need to escape the vicious circle of updating sigs and patching. Different, deeper reaching measures need to be taken to reduce susceptibility to these issues. Architectural changes are necessary to remove the capabilities for these things to run, spread and thrive, not more patches and virus signatures. Sooner or later, individuals will find the answer. It's evolution in the digital world. Regards, Frank _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- RE: Calcuating Loss Jos Osborne (May 11)
- <Possible follow-ups>
- RE: Calcuating Loss Jos Osborne (May 11)
- Re: Calcuating Loss Valdis . Kletnieks (May 11)
- RE: Calcuating Loss Schmidt, Michael R. (May 11)
- Re: Calcuating Loss Valdis . Kletnieks (May 11)
- Re: Calcuating Loss Alexander Schreiber (May 11)
- RE: Calcuating Loss Schmidt, Michael R. (May 12)
- Re: Calcuating Loss Valdis . Kletnieks (May 12)
- RE: Calcuating Loss Frank Knobbe (May 12)
- RE: Calcuating Loss Gary E. Miller (May 12)
- RE: Calcuating Loss Frank Knobbe (May 12)
- RE: Calcuating Loss Gary E. Miller (May 12)
- RE: Avoiding traceability (was: Calculating Loss) Frank Knobbe (May 12)
- RE: Avoiding traceability (was: Calculating Loss) Ron DuFresne (May 13)