[Full-disclosure] Sasser or other nasty worm needed

2006-11-27 Thread kikazz
I'm a high school network administration teacher looking for a creative
means of teaching my students the importance of patch management.  I was
hoping to let a particularly nasty worm loose on a closed lab so my students
could see what happens during an outbreak, but I'm running into a hitch - I
can't find a worm that would spread quickly enough to be useful.  

Does anyone have a copy of Sasser or a similar worm that they would be
willing to send or link me to?  Please contact me off-list.  I would be
happy to verify my identity as a high school teacher off-list as I'm sure
that is a concern for most anyone who has what I am looking for.  

Please do not reply on list as I am not currently a member.  

Thank you,

Chris

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Sasser or other nasty worm needed

2006-11-27 Thread [EMAIL PROTECTED]

Chris -

I don't know what to make of your please reply off-list; I'm not a member
comment.
It's almost as ridiculous as what you are requesting.

If I take your question at face value, you are an INSTRUCTOR, not an Admin.
That means you probably teach an A+ class, maybe an abbreviated CCNA
program.

You have NO FUCKING BUSINESS WHATSOEVER even THINKING about turning loose a
dangerous piece of Malware in someone else's network. And it IS someone
else's network; specifically it belongs to the district.

Speak as a network engineer for a large midwestern schooldistrict, if you
did that in MY network, I'd have your job. GOD HELP YOU if it turns out
that you actually ARE a teacher in my district. I don't recognize the name,
but you can bet your ass that every time we have an infection in one of our
schools from now until the stars burn out; that I'll be making a point of
asking who the computer teachers are in that building.

You want to teach these kids a lesson? Write it on the blackboard.

We have enough work to do just keeping up with the kids, without an alleged
professional turning loose a worm in our network.


=
I'm a high school network administration teacher 
looking for a creative means of teaching my students 
the importance of patch management.  I was hoping to 
let a particularly nasty worm loose on a closed lab 
so my students could see what happens during an outbreak, 
but I'm running into a hitch - I can't find a worm that 
would spread quickly enough to be useful.  

Does anyone have a copy of Sasser or a similar worm 
that they would be willing to send or link me to?  
Please contact me off-list.  I would be happy to 
verify my identity as a high school teacher off-list 
as I'm sure that is a concern for most anyone who has 
what I am looking for.  

Please do not reply on list as I am not currently a member.  
Thank you,
Chris



mail2web - Check your email from the web at
http://mail2web.com/ .


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Sasser or other nasty worm needed

2006-11-27 Thread Michael Holstein
 Does anyone have a copy of Sasser or a similar worm that they would be
 willing to send or link me to?  Please contact me off-list.  I would be
 happy to verify my identity as a high school teacher off-list as I'm sure
 that is a concern for most anyone who has what I am looking for.  

You're kidding, right? .. just take a fresh install of Win2K and hook it 
to the Internet.

Go get coffee. Come back in ~15min.

Boot to BartPE (or Knoppix, etc) and look for anything new in 
%systemroot%. You'll probably have more than one. It'll be a binary 
though, probably packed/encrypted 3+ times (and that's annoying, but not 
impossible, to reverse-engineer).

The source code for all the [SD|RX|AGO]bot variants is easily found on 
the web. Recompile in Visual Basic, pack with UPX (or whatever) and off 
you go.

To prison that is...

Meanwhile .. a quick look at your email :

Received: from blueberry ( [69.3.80.94])
by mx.google.com with ESMTP id i20sm9690041wxd.2006.11.26.14.32.22;
Sun, 26 Nov 2006 14:32:22 -0800 (PST)
From: kikazz [EMAIL PROTECTED]

suggests that you aren't a teacher at all ..

network:IP-Network-Block:69.3.80.88 - 69.3.80.95
network:Org-Name:Compu' Counts Consulting Inc.
network:Street-Address:6174 Darleon Place
network:City:ALEXANDRIA
network:State:VA
network:Postal-Code:22310

sigh .. another consultant that is trying to get other folks to do his 
dirty work...

Cheers,

Michael Holstein CISSP GCIA
Information Security Administrator
Cleveland State University

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Sasser or other nasty worm needed

2006-11-27 Thread deep fried

What am I

Consultant?
School Teacher?
Terrorist?





On 11/27/06, K F (lists) [EMAIL PROTECTED] wrote:


Dude... settle the hell down.

I see little problem with this guy doing this on a closed LAN in a lab
setting. What part of CLOSED LAB did you miss? Its not like he is
intentionally letting it loose on the entire school LAN.

-KF

[EMAIL PROTECTED] wrote:
 Chris -

 I don't know what to make of your please reply off-list; I'm not a
member
 comment.
 It's almost as ridiculous as what you are requesting.

 If I take your question at face value, you are an INSTRUCTOR, not an
Admin.
 That means you probably teach an A+ class, maybe an abbreviated CCNA
 program.

 You have NO FUCKING BUSINESS WHATSOEVER even THINKING about turning
loose a
 dangerous piece of Malware in someone else's network. And it IS someone
 else's network; specifically it belongs to the district.

 Speak as a network engineer for a large midwestern schooldistrict, if
you
 did that in MY network, I'd have your job. GOD HELP YOU if it turns out
 that you actually ARE a teacher in my district. I don't recognize the
name,
 but you can bet your ass that every time we have an infection in one of
our
 schools from now until the stars burn out; that I'll be making a point
of
 asking who the computer teachers are in that building.

 You want to teach these kids a lesson? Write it on the blackboard.

 We have enough work to do just keeping up with the kids, without an
alleged
 professional turning loose a worm in our network.


 =
 I'm a high school network administration teacher
 looking for a creative means of teaching my students
 the importance of patch management.  I was hoping to
 let a particularly nasty worm loose on a closed lab
 so my students could see what happens during an outbreak,
 but I'm running into a hitch - I can't find a worm that
 would spread quickly enough to be useful.

 Does anyone have a copy of Sasser or a similar worm
 that they would be willing to send or link me to?
 Please contact me off-list.  I would be happy to
 verify my identity as a high school teacher off-list
 as I'm sure that is a concern for most anyone who has
 what I am looking for.

 Please do not reply on list as I am not currently a member.
 Thank you,
 Chris
 

 
 mail2web - Check your email from the web at
 http://mail2web.com/ .


 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/



___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Sasser or other nasty worm needed

2006-11-27 Thread K F (lists)
a douchebag?

I dunno but why the hell aren't your boxes patched to Sasser yet?

-KF


deep fried wrote:
 What am I
  
 Consultant?
 School Teacher?
 Terrorist?
  
  


  
 On 11/27/06, *K F (lists)* [EMAIL PROTECTED] 
 mailto:[EMAIL PROTECTED] wrote:

 Dude... settle the hell down.

 I see little problem with this guy doing this on a closed LAN in a
 lab
 setting. What part of CLOSED LAB did you miss? Its not like he is
 intentionally letting it loose on the entire school LAN.

 -KF

 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote:
  Chris -
 
  I don't know what to make of your please reply off-list; I'm
 not a member
  comment.
  It's almost as ridiculous as what you are requesting.
 
  If I take your question at face value, you are an INSTRUCTOR,
 not an Admin.
  That means you probably teach an A+ class, maybe an abbreviated CCNA
  program.
 
  You have NO FUCKING BUSINESS WHATSOEVER even THINKING about
 turning loose a
  dangerous piece of Malware in someone else's network. And it IS
 someone
  else's network; specifically it belongs to the district.
 
  Speak as a network engineer for a large midwestern
 schooldistrict, if you
  did that in MY network, I'd have your job. GOD HELP YOU if it
 turns out
  that you actually ARE a teacher in my district. I don't
 recognize the name,
  but you can bet your ass that every time we have an infection in
 one of our
  schools from now until the stars burn out; that I'll be making a
 point of
  asking who the computer teachers are in that building.
 
  You want to teach these kids a lesson? Write it on the blackboard.
 
  We have enough work to do just keeping up with the kids, without
 an alleged
  professional turning loose a worm in our network.
 
 
  =
  I'm a high school network administration teacher
  looking for a creative means of teaching my students
  the importance of patch management.  I was hoping to
  let a particularly nasty worm loose on a closed lab
  so my students could see what happens during an outbreak,
  but I'm running into a hitch - I can't find a worm that
  would spread quickly enough to be useful.
 
  Does anyone have a copy of Sasser or a similar worm
  that they would be willing to send or link me to?
  Please contact me off-list.  I would be happy to
  verify my identity as a high school teacher off-list
  as I'm sure that is a concern for most anyone who has
  what I am looking for.
 
  Please do not reply on list as I am not currently a member.
  Thank you,
  Chris
  
 
  
  mail2web - Check your email from the web at
  http://mail2web.com/ .
 
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/
 
 

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/


 

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Sasser or other nasty worm needed

2006-11-27 Thread Valdis . Kletnieks
On Mon, 27 Nov 2006 13:36:39 EST, K F (lists) said:
 Dude... settle the hell down.
 
 I see little problem with this guy doing this on a closed LAN in a lab 
 setting. What part of CLOSED LAB did you miss? Its not like he is 
 intentionally letting it loose on the entire school LAN.

You would have us believe that the guy is clued enough to run a closed
lab without screwing up (and there's *lots* of ways to screw up, starting
with forgetting to wipe the drives afterwards, forgetting to disable a
wireless card, forgetting to not plug any of the boxes into the normal net,
forgetting to...).

And yet he's not clued enough to know how to find a copy of Sasser by himself.

There are a lot of people who are of the opinion that if you have to ask
where to find a copy of Sasser, you're not clued enough to be trusted with
a copy.


pgpw76PA4Q4Wi.pgp
Description: PGP signature
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Sasser or other nasty worm needed

2006-11-27 Thread Peter Dawson

On 11/27/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote:


And yet he's not clued enough to know how to find a copy of Sasser by
himself.

There are a lot of people who are of the opinion that if you have to ask
where to find a copy of Sasser, you're not clued enough to be trusted with
a copy.





yeah I agree, whoever posted/ started this orginal thread was on gmail and

is not clued in enough to take a quick left glance at the adsense frame
and s/eh will get tonnes of bait from google :)-



go figure..
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Sasser or other nasty worm needed

2006-11-27 Thread Octal

Well if it's an air gapped network then there's no way to get patches unless
you carry them over on a disk.  When I taught a class at a local university
we did a similar experiment on an unpatched air gapped network.

On 11/27/06, K F (lists) [EMAIL PROTECTED] wrote:


a douchebag?

I dunno but why the hell aren't your boxes patched to Sasser yet?

-KF


deep fried wrote:
 What am I

 Consultant?
 School Teacher?
 Terrorist?





 On 11/27/06, *K F (lists)* [EMAIL PROTECTED]
 mailto:[EMAIL PROTECTED] wrote:

 Dude... settle the hell down.

 I see little problem with this guy doing this on a closed LAN in a
 lab
 setting. What part of CLOSED LAB did you miss? Its not like he is
 intentionally letting it loose on the entire school LAN.

 -KF

 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote:
  Chris -
 
  I don't know what to make of your please reply off-list; I'm
 not a member
  comment.
  It's almost as ridiculous as what you are requesting.
 
  If I take your question at face value, you are an INSTRUCTOR,
 not an Admin.
  That means you probably teach an A+ class, maybe an abbreviated
CCNA
  program.
 
  You have NO FUCKING BUSINESS WHATSOEVER even THINKING about
 turning loose a
  dangerous piece of Malware in someone else's network. And it IS
 someone
  else's network; specifically it belongs to the district.
 
  Speak as a network engineer for a large midwestern
 schooldistrict, if you
  did that in MY network, I'd have your job. GOD HELP YOU if it
 turns out
  that you actually ARE a teacher in my district. I don't
 recognize the name,
  but you can bet your ass that every time we have an infection in
 one of our
  schools from now until the stars burn out; that I'll be making a
 point of
  asking who the computer teachers are in that building.
 
  You want to teach these kids a lesson? Write it on the blackboard.
 
  We have enough work to do just keeping up with the kids, without
 an alleged
  professional turning loose a worm in our network.
 
 
  =
  I'm a high school network administration teacher
  looking for a creative means of teaching my students
  the importance of patch management.  I was hoping to
  let a particularly nasty worm loose on a closed lab
  so my students could see what happens during an outbreak,
  but I'm running into a hitch - I can't find a worm that
  would spread quickly enough to be useful.
 
  Does anyone have a copy of Sasser or a similar worm
  that they would be willing to send or link me to?
  Please contact me off-list.  I would be happy to
  verify my identity as a high school teacher off-list
  as I'm sure that is a concern for most anyone who has
  what I am looking for.
 
  Please do not reply on list as I am not currently a member.
  Thank you,
  Chris
  
 
 

  mail2web - Check your email from the web at
  http://mail2web.com/ .
 
 
  ___
  Full-Disclosure - We believe in it.
  Charter: http://lists.grok.org.uk/full-disclosure-charter.html
  Hosted and sponsored by Secunia - http://secunia.com/
 
 

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/


 

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Sasser or other nasty worm needed

2006-11-27 Thread Valdis . Kletnieks
On Mon, 27 Nov 2006 13:31:04 CST, Octal said:
 Well if it's an air gapped network then there's no way to get patches unless
 you carry them over on a disk.  When I taught a class at a local university
 we did a similar experiment on an unpatched air gapped network.

I've seen this done lots of times.  Amazing how often people forget to
wipe the disks after delivering the patches... ;)


pgpAOxm0JTNZc.pgp
Description: PGP signature
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Sasser or other nasty worm needed

2006-11-27 Thread Valdis . Kletnieks
On Mon, 27 Nov 2006 17:16:31 EST, Rick said:
 
 On Mon, 27 Nov 2006, [EMAIL PROTECTED] wrote:
 
  You would have us believe that the guy is clued enough to run a closed
  lab without screwing up (and there's *lots* of ways to screw up, starting
  with forgetting to wipe the drives afterwards, forgetting to disable a
  wireless card, forgetting to not plug any of the boxes into the normal net,
  forgetting to...).
 
 so when you go to mcdonalds and hand over your $5 for your MCbig meal, do 
 you consider the repercussions of supporting an industry which pays low 
 wages, is under-staffed, and promotes world-hunger by using enough grain 
 to feed a continent, etc...?

WTF does that have to do with the topic?  Unless you want to make the point
that often, the McDonald's staff fails to use a level of food-preparation
hygiene that matches the computer-security hygiene requirements to work with
known malware?

The average McDonald's doesn't have biohazard signs (whether they should is a
different rant) - and even the average doctor's office that *does* have
biohazard signs for used hypodermic needles and the like usually has special
training/procedures for dealing with the stuff.

And labs that do active research on biohazards have even stricter protocols.

(Make note, there *have* been screw-ups in the protocols at places that handle
stuff like Ebola and smallpox - Preston's The Hot Zone has a nice story of a
dead monkey with nothing but a plastic garbage bag keeping the nasties in, and
a few years ago, there was a small to-do in one of the labs in England that had
some smallpox...)

 And yet he's not clued enough to know how to find a copy of Sasser by 
 himself.

 so what?
 do *you* know where to find a copy?
Yes.
 did you always?
Yes.
 have you always been able to configure a network to talk via EIGRP?
No, because when I first got on the net, RFC1058 was still 4 years in the
future. So it wasn't always possible, because the option didn't always
exist.

  There are a lot of people who are of the opinion that if you have to ask
  where to find a copy of Sasser, you're not clued enough to be trusted with
  a copy.
 
 perhaps the next time you need a doctor, the one you find will laugh at 
 you with the same sense of elitism you demonstrate.

Did I say I was one of the lot of people? Did you notice that I was
replying *in the context of KF's comments* saying It's cool because it's
in a closed lab?


pgpcvyXkmDcml.pgp
Description: PGP signature
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Sasser or other nasty worm needed

2006-11-27 Thread Rick

On Mon, 27 Nov 2006, [EMAIL PROTECTED] wrote:

 You would have us believe that the guy is clued enough to run a closed
 lab without screwing up (and there's *lots* of ways to screw up, starting
 with forgetting to wipe the drives afterwards, forgetting to disable a
 wireless card, forgetting to not plug any of the boxes into the normal net,
 forgetting to...).

so when you go to mcdonalds and hand over your $5 for your MCbig meal, do 
you consider the repercussions of supporting an industry which pays low 
wages, is under-staffed, and promotes world-hunger by using enough grain 
to feed a continent, etc...?

 And yet he's not clued enough to know how to find a copy of Sasser by 
 himself.

so what?
do *you* know where to find a copy?
did you always?
have you always been able to configure a network to talk via EIGRP?

 There are a lot of people who are of the opinion that if you have to ask
 where to find a copy of Sasser, you're not clued enough to be trusted with
 a copy.

perhaps the next time you need a doctor, the one you find will laugh at 
you with the same sense of elitism you demonstrate.


Rick

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Sasser or other nasty worm needed

2006-11-27 Thread Peter Dawson

I doubt schools have CLOSED LAB. I would like to know where the budget comes
from, for this type of network. If so , then every school district board
needs one.. :)-






On 11/27/06, K F (lists) [EMAIL PROTECTED] wrote:


Dude... settle the hell down.

I see little problem with this guy doing this on a closed LAN in a lab
setting. What part of CLOSED LAB did you miss? Its not like he is
intentionally letting it loose on the entire school LAN.

-KF

[EMAIL PROTECTED] wrote:
 Chris -

 I don't know what to make of your please reply off-list; I'm not a
member
 comment.
 It's almost as ridiculous as what you are requesting.

 If I take your question at face value, you are an INSTRUCTOR, not an
Admin.
 That means you probably teach an A+ class, maybe an abbreviated CCNA
 program.

 You have NO FUCKING BUSINESS WHATSOEVER even THINKING about turning
loose a
 dangerous piece of Malware in someone else's network. And it IS someone
 else's network; specifically it belongs to the district.

 Speak as a network engineer for a large midwestern schooldistrict, if
you
 did that in MY network, I'd have your job. GOD HELP YOU if it turns out
 that you actually ARE a teacher in my district. I don't recognize the
name,
 but you can bet your ass that every time we have an infection in one of
our
 schools from now until the stars burn out; that I'll be making a point
of
 asking who the computer teachers are in that building.

 You want to teach these kids a lesson? Write it on the blackboard.

 We have enough work to do just keeping up with the kids, without an
alleged
 professional turning loose a worm in our network.


 =
 I'm a high school network administration teacher
 looking for a creative means of teaching my students
 the importance of patch management.  I was hoping to
 let a particularly nasty worm loose on a closed lab
 so my students could see what happens during an outbreak,
 but I'm running into a hitch - I can't find a worm that
 would spread quickly enough to be useful.

 Does anyone have a copy of Sasser or a similar worm
 that they would be willing to send or link me to?
 Please contact me off-list.  I would be happy to
 verify my identity as a high school teacher off-list
 as I'm sure that is a concern for most anyone who has
 what I am looking for.

 Please do not reply on list as I am not currently a member.
 Thank you,
 Chris
 

 
 mail2web - Check your email from the web at
 http://mail2web.com/ .


 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/



___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Sasser or other nasty worm needed

2006-11-27 Thread Rick
On Mon, 27 Nov 2006, Peter Dawson wrote:

 I doubt schools have CLOSED LAB. I would like to know where the budget comes
 from, for this type of network. If so , then every school district board
 needs one.. :)-

some do. schools partnered with, or using the curriculum of the Center 
for System Security and Information Assurance (www.cssia.org) come to 
mind. i'm sure there are others.

Rick



___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Sasser or other nasty worm needed

2006-11-27 Thread Rick
On Mon, 27 Nov 2006, [EMAIL PROTECTED] wrote:

 so when you go to mcdonalds and hand over your $5 for your MCbig meal, do
 you consider the repercussions of supporting an industry which pays low
 wages, is under-staffed, and promotes world-hunger by using enough grain
 to feed a continent, etc...?

 WTF does that have to do with the topic?  Unless you want to make the point
 that often, the McDonald's staff fails to use a level of food-preparation
 hygiene that matches the computer-security hygiene requirements to work with
 known malware?

it seemed to me that you were arguing a reason for not distributing the 
binary was the guy is (not) clued enough to run a 'closed lab' without 
screwing up... making this a 'we shouldn't support this because we 
do not know this person is responsible' approach. so the context of my 
statement relates to consistency of accountability.

 do *you* know where to find a copy?
 Yes.
 did you always?
 Yes.

i'm sorry, but i have a hard time believing this.

 have you always been able to configure a network to talk via EIGRP?
 No, because when I first got on the net, RFC1058 was still 4 years in the
 future. So it wasn't always possible, because the option didn't always
 exist.

and once it did there was a point in time in which you learned. you 
learned because you had access to information. somone else provided this 
information.

 There are a lot of people who are of the opinion that if you have to ask
 where to find a copy of Sasser, you're not clued enough to be trusted with
 a copy.

 perhaps the next time you need a doctor, the one you find will laugh at
 you with the same sense of elitism you demonstrate.

 Did I say I was one of the lot of people? Did you notice that I was
 replying *in the context of KF's comments* saying It's cool because it's
 in a closed lab?

i must've missed that part. i jumped into this because i was once a 
student at university who benefited from this type of 'closed lab learning 
environment.'

you are absolutely correct that something could go wrong, but fear of 
failure ought not keep one from trying. i'm reminded of Roosevelt's 
saying:

It is not the critic who counts: not the man who points out how the 
strong man stumbles or where the doer of deeds could have done better. The 
credit belongs to the man who is actually in the arena, whose face is 
marred by dust and sweat and blood, who strives valiantly, who errs and 
comes up short again and again, because there is no effort without error 
or shortcoming, but who knows the great enthusiasms, the great devotions, 
who spends himself for a worthy cause; who, at the best, knows, in the 
end, the triumph of high achievement, and who, at the worst, if he fails, 
at least he fails while daring greatly, so that his place shall never be 
with those cold and timid souls who knew neither victory nor defeat.



cheers,

Rick

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Sasser or other nasty worm needed

2006-11-27 Thread chedder1
Yeah, old computers at schools are often given away for recycling.

On Mon, Nov 27, 2006 at 10:42:14PM -0500, Matthew Flaschen wrote:
 What budget?  Every school that would have a networking class also has
 obsolete computers.  Take a dozen, reformat them, put on an unpatched
 version of Windows, pull out or disable wifi, and connect them all to a
 switch (also probably available second-hand).  Ensure neither computers
 nor switch are connected to any other network.  Sure, you have to be
 sure not to f* it up, but it doesn't cost anything.  Set-up sasser on
 one by moving it off a CD-R.  Wait. :)  This should cost little or nothing.
 
 Matt Flaschen
 
 Peter Dawson wrote:
  I doubt schools have CLOSED LAB. I would like to know where the budget
  comes
  from, for this type of network. If so , then every school district board
  needs one.. :)-
 



 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/


-- 
 ___
|   .__   .___  .___|
|   |  |__      __| _/__| _/___ |
|_/ ___\|  |  \_/ __ \ / __ |/ __ |/ __ \_  __ \|
|\  \___|   Y  \  ___// /_/ / /_/ \  ___/|  | \/|
| \___  ___|  /\___   \ |\___  __|   |
|\/ \/ \/ \/\/\/|
|   |
|http://chedder.hacked.in   |
|  cheesebox.terroristorganization.info |
|___|
   You don't exist. Go away

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/