Re: Publishing Nimda Logs

[Jose Nazario <jose () monkey org>]

On Tue, 7 May 2002, Deus, Attonbitus wrote:

>   Input appreciated.

this is significantly worse than you may realize. since they all have an
effective back door, its very easy to walk around and pick them up for a
DDoS attack. you'd literally be handing them to people. granted all one
has to do is listen for nimda/CR/CR2 scans and you have a good chunk ready
to run with. however, your actions would explicitely enable and assist
this.

i highly suggest you don't do this. i suggest instead you attempt to work
with CERT and other organizations through a group like FIRST to try and
clean this up.

___________________________
jose nazario, ph.d.                     jose () monkey org
                                        http://www.monkey.org/~jose/