nanog mailing list archives

Re: Sobig.f surprise attack today


From: Jay Hennigan <jay () west net>
Date: Fri, 22 Aug 2003 11:49:24 -0700 (PDT)


On Fri, 22 Aug 2003, Owen DeLong wrote:


OK... Maybe I'm smoking crack here, but, if they have the list of 20
machines,
wouldn't it make more sense to replace them with honey-pots that download
code to remove SOBIG instead of just disabling them?

Let's use the virus against itself.  At this point, I think that's a
legitimate
countermeasure.

Start coding, you've got twelve minutes.


-- 
Jay Hennigan - CCIE #7880 - Network Administration - jay () west net
WestNet:  Connecting you to the planet.  805 884-6323      WB6RDV
NetLojix Communications, Inc.  -  http://www.netlojix.com/


Current thread: