Vulnerability Development mailing list archives

Re: Malicious use of grc.com


From: "Thorsten Droigk" <droigk () necnet de>
Date: Mon, 26 Nov 2001 23:13:48 +0100

There are a lot of services on the Internet that portscan a machine of your
choice, so there is nothing new about grc.com doing it. If you want to
complain about grc.com, you should complain about every proxy in the whole
web, too. I do not think that there are big differences between these
services and proxies - both hide your original IP from another server but
simultanously log it for the case of abuse.
I cannot believe that grc.com really does not log the use of its portscan
service - that would be too stupid (and illegal, as far as I know). In my
eyes, the phrase "Information gained will NOT be retained, viewed, or used
by us in any way for any purpose whatsoever" refers to the results of the
portscans and not to the logs of grc.com's httpd.

Best regards,
Thorsten Droigk


Current thread: