Re: Oh Yeah, botnet communications

["Elazar Broad" <elazar () hushmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

"You know how the current amateur botnet offerings are basing
domain lists off the current time to allow the 'good guys' to
prepare?"

Shhh, your gonna wake the "<insert A/V company here> writes all the
malware" theorists...


On Thu, 19 Feb 2009 23:13:38 -0500 T Biehn <tbiehn () gmail com> wrote:
> You know how the current amateur botnet offerings are basing
> domain lists
> off the current time to allow the 'good guys' to prepare?

> Why not base the seed off something like a news RSS feed? I asked
> some
> whitehats when I was ruined in Washington DC and they couldn't
> tell me.
>
> News isn't predictable but is globally shared on a given day.
>
> -Travis
-----BEGIN PGP SIGNATURE-----
Charset: UTF8
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 3.0

wpwEAQECAAYFAkmeNYoACgkQi04xwClgpZhjdAP/Uz4IUuJPRrNJbbuZW5zaSllvBUZM
I0MSZCD3KYViEWbDSzBWIYBY67DHTl2SAz5n91aG3Xswd+AYj//9uMVPSBg0OJ/DcXX1
FItea1gc6PPeNMLWAXMrLcbP2wCwzDlrzjzU4TRmUGUXQBSWq9E/RccqI2QvzpqvvBKu
Nfr1JeA=
=0Rjf
-----END PGP SIGNATURE-----

--
Earn your medical billing and coding degree, 100% online! Enroll now.
 http://tagline.hushmail.com/fc/BLSrjkqfMmgJRBfXoys7dlGxe42aOzYO2gb37Tz3VOR2i51BEqQXYN67V8X/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/