Full Disclosure mailing list archives
Re: Calcuating Loss
From: James Riden <j.riden () massey ac nz>
Date: Thu, 13 May 2004 08:32:36 +1200
"Schmidt, Michael R." <Michael.Schmidt () T-Mobile com> writes:
Well one of the biggest issues that allows people to remain anonymous is DHCP. If everyone on the internet was required to get a static IP address, or to log which IP they were using - using a secure technology then everyone could be tracked, sure a few "super" hackers could still manage to escape detection I am sure, but there is nothing that is the equivalent of a drivers license on the internet.
No. First thing to do is find an easily compromised box - still pretty unlikely to be a honeypot even these days - and get on there. Once you've installed a backdoor, secured the box and wiped the logfiles, it gets much harder to trace back. Especially if that's done two or three times. Only the very stupid launch serious attacks from their own machine. -- James Riden / j.riden () massey ac nz / Systems Security Engineer Information Technology Services, Massey University, NZ. GPG public key available at: http://www.massey.ac.nz/~jriden/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Re: Calcuating Loss, (continued)
- Re: Calcuating Loss Valdis . Kletnieks (May 12)
- RE: Calcuating Loss Frank Knobbe (May 12)
- RE: Calcuating Loss Gary E. Miller (May 12)
- RE: Calcuating Loss Frank Knobbe (May 12)
- RE: Calcuating Loss Gary E. Miller (May 12)
- RE: Avoiding traceability (was: Calculating Loss) Frank Knobbe (May 12)
- RE: Avoiding traceability (was: Calculating Loss) Ron DuFresne (May 13)
- Re: Calcuating Loss Valdis . Kletnieks (May 13)