On Mon, 2003-08-18 at 23:51, HaywireMac wrote: > On Mon, 18 Aug 2003 23:17:45 -0400 > Brant Fitzsimmons <[EMAIL PROTECTED]> uttered: > > > > > >We can only speculate what was in the mind of the worm's author(s). > > >But if the 200,000 instances of this worm had chosen to target > > >"windowsupdate.microsoft.com" or even "microsoft.com" with an > > >unthrottled Raw Socket SYN flood, a very different scenario would be > > >playing out today and tomorrow: Microsoft.com would be gone. > > > > > >But the worm's originator(s) appear to have been more interested in > > >making a point, than in taking Microsoft.com permanently off the > > >Internet _ which they could have easily done. > > ></quote> > > > > > >Sharrea > > > > > > > Interesting. > > Ya, sounds almost like White Hats to me, tho, for white hats it did do a > lot of damage to Windows machines worldwide, ie. at least in terms of > inconvenience. From what I have heard, it has been relatively easy to > remove and patch, and the damage doesn't seem to be permanent. > > Hmmmm, didn't Gibsom warn MS about Raw Sockets a loooooong time ago when > XP was just a dream (nightmare?). >
Well, I know for a fact that it's been discussed for quite some time on the bugtraq security lists. So something was expected to turn up. LX -- 같같같같같같같같같같같같같같같같같같같같같같같같 Kernel 2.4.21-0.13mdk Linux Mandrake 9.1 Enlightenment-0.16.5-12mdk Evolution 1.2.4-1.1mdk Linux User #268899 http://counter.li.org/ 같같같같같같같같같같같같같같같같같같같같같같같같
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
