Full Disclosure mailing list archives

RE: Avoiding traceability (was: Calculating Loss)


From: Ron DuFresne <dufresne () winternet com>
Date: Thu, 13 May 2004 11:22:24 -0500 (CDT)


        [SNIP]



PS: Not that I do these things of course.... perhaps a real blackhat or
two that do hack anonymously can speak up and tell us what they use to
anonymize themselves.




Many still just hide behind all the background/foreground noise.  It takes
effort and familiarity of the logging system<s> to try and catch the
bad-boys, and as has been mentioned in this and other realted threads,
many admns do not even know where their logs are, let alone how to
interpret what's detailed within.

Of course, the local infragard sent out a daily update, mentioned the
Phatbot arrest and it's realtion to the trade in botnets, which are a fine
way to cover tracks as well.

Thanks,

Ron DuFresne
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
        ***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: