RE: CodeGreen beta release (idq-patcher/antiCodeRed/etc.)

["Alexander Sarras (SEA)" <Alexander.Sarras () sea ericsson se>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Well, most times an exploits gets into the wild before a patch. Now a
lot of machine can be infected, and even patching take up some time.
What should the your security expert, sysadmin, whoever the poor sods
are, DO with those oddballs which got a counter worm. Wait for a
counter-counter-patch, reinstall everything, try to remove the
greenie manually. Whatever it is it takes up time and resources which
in the end equals money!
It's not going to make living easier for admins if smearcases start
to release counter-virii in to the wild. 

In my book a virus is a virus is a virus is A BAD THING (tm) !
And if I happen to find the originator I'd probably be inclined to
tie up his or her resources, preferably to some convenient 200ft
cliff, where the RN runs target practice!

Sorry, I'm very _strongly_ against it. 
SaS
- -- 
Dr. Alexander Sarras
Product Unit Enterprise Communication Systems
Ericsson Enterprise AB

Tel:   +43/1/811 00 4668
Fax:   +43/1/811 00 11 4668
email: Alexander.Sarras () ericsson com


> -----Original Message-----
> From: Ivan Dimitrov [mailto:dobber () ns varna net]
> Sent: Thursday, September 06, 2001 9:35 AM
> To: Alexander Sarras (SEA)
> Cc: vuln-dev () securityfocus com
> Subject: RE: CodeGreen beta release (idq-patcher/antiCodeRed/etc.)
>
>
> I can only guess that this tool is writen not for you or any other
> security expert, but for those ppl that haven't even heard of 
> Code Red, or
> don't care at all, or, or, or. I strongly recoment the future 
> writing of
> similar anti-worm worms.
>
>     Ivan Dimitrov
> System Administrator
>   dobber () varna net
>   ++359-052-244114
>
> On Thu, 6 Sep 2001, Alexander Sarras (SEA) wrote:
>
> > > -----Original Message-----
> > > From: Meritt James [mailto:meritt_james () bah com]
> > >
> > > Clever tool with immoral, unethical and possibly illegal use.
> > Never mind that last point, I'd be more concerned with the 
> first two.
> > And, *anybody* who want's to sneak a worm into my systems (no
> > matter what the intentions are) gets me really pissed off. That
> > probably holds true for a lot of people.
> > A.Sarras
> > - --
> > Dr. Alexander Sarras
> > Product Unit Enterprise Communication Systems
> > Ericsson Enterprise AB

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.1

iQA/AwUBO5dSCX/j44UBWb5aEQIJgQCgokApQ/SkPX0X5rglZYwOI2V3NAEAmgPK
gN0YImG+8LQd6t83JRbc4Q0d
=fFrp
-----END PGP SIGNATURE-----