Information Security News mailing list archives

Re: Code Red the Dracula of worms?


From: InfoSec News <isn () c4i org>
Date: Wed, 29 Aug 2001 07:23:03 -0500 (CDT)

Forwarded from: "Jay D. Dyson" <jdyson () treachery net>

-----BEGIN PGP SIGNED MESSAGE-----

On Tue, 28 Aug 2001, InfoSec News wrote: 

A new permutation of the Code Red II worm was discovered on Friday, and
experts say that Code Red is now unlikely ever to disappear. 

        I seem to recall the ill-informed saying the same thing about the
Morris worm in the 1980s.  Anyone had that worm knocking on their ports
lately?

"This is pretty much noise level for Code Red II and CodeRed.d--it's not
going to get any better or worse and will stay like this forever,"  said
Thompson. "Those machines that have not yet been patched never will be,
meaning that the worm is here to stay." 

        Anyone who uses words like "forever" and "never" in this volatile
world of rapidly-changing technology only demonstrates how ill-informed
they are.  The notion that systems that haven't been patched "never will
be" is a presumption based more on frustration than fact.  And the notion
of permanence of *any* technology or problem (beyond their mere generic
existence of phenomena) demonstrates an incomprehensible lack of
understanding not only of computer history, but history itself. 

According to Thompson, four to five new worms are created by accident
on the Internet every day

        By *accident*?  I'd love to see examples of this.

- -Jay

  (    (                                                          _______
  ))   ))   .--"There's always time for a good cup of coffee"--.   >====<--.
C|~~|C|~~| (>------ Jay D. Dyson -- jdyson () treachery net ------<) |    = |-'
 `--' `--'  `-------- Real men prefer full disclosure. --------'  `------'

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: See http://www.treachery.net/~jdyson/ for current keys.

iQCVAwUBO4uw7LlDRyqRQ2a9AQFssQP/YSkdLCCf9kDDq62Y+FFNdPfjvF7CD8DY
Vv2epiJJmWBoV6/EUH4oqPEE71wgDsJ3jSzcF/1QZv6Bn4M0JHaLsf+tgfsa/UQr
3jcNvTA/KWoIhL2AYPKO4pFVe98MmlyPtHK/HAEVz+OfqQw9B252qEVlV4fG/YZZ
PtmOt03HuHI=
=r1dj
-----END PGP SIGNATURE-----



-
ISN is currently hosted by Attrition.org

To unsubscribe email majordomo () attrition org with 'unsubscribe isn' in the BODY
of the mail.


Current thread: