Re: [Full-disclosure] A Botted Fortune 500 a Day

2007-04-17 Thread Valdis . Kletnieks
On Wed, 18 Apr 2007 14:25:15 +1200, Nick FitzGerald said: > the same. If more admins stood up to such "managerial incompetence" > things might actually change for the better, as like it or not, it _is_ > managerial incompetence that is the problem here, regardless of the > source of the proble

Re: [Full-disclosure] A Botted Fortune 500 a Day

2007-04-17 Thread Nick FitzGerald
Troy to me: > > SI is, however, showing that at least some F500s > > have lazy arse/stupid/otherwise incompetent admins and/or oversight > > procedures and/or policies driving the whole mess of their IT systems, > > and as a result the rest of us pay for their incompetence. > > I've worked in a l

Re: [Full-disclosure] A Botted Fortune 500 a Day

2007-04-17 Thread Troy
On 4/17/07, Nick FitzGerald <[EMAIL PROTECTED]> wrote: SI is, however, showing that at least some F500s have lazy arse/stupid/otherwise incompetent admins and/or oversight procedures and/or policies driving the whole mess of their IT systems, and as a result the rest of us pay for their incompet

Re: [Full-disclosure] A Botted Fortune 500 a Day

2007-04-17 Thread Nick FitzGerald
Steven Adair wrote: > Is this in anyway surprising? ... Surprising? Not really. > ... I think we all know the answer is no. Many > Fortune 500 companies have more employees than some ISPs have customers. And that means the corporates should be expected to be (as) botted? > Should we reall

Re: [Full-disclosure] A Botted Fortune 500 a Day

2007-04-17 Thread K K
On 4/11/07, Gadi Evron <[EMAIL PROTECTED]> wrote: > Support Intelligence releases daily reports on different fortune 500 > companies which are heavily affected by the botnet problem, with many > compromised machines on their networks. So what happened to the daily update schedule? Nothing new post

Re: [Full-disclosure] A Botted Fortune 500 a Day

2007-04-13 Thread RMueller
"Dude VanWinkle" <[EMAIL PROTECTED]> wrote: > > From: poo [mailto:[EMAIL PROTECTED] > > Sent: Friday, April 13, 2007 6:03 AM > > To: [EMAIL PROTECTED] > > Cc: [EMAIL PROTECTED]; > > [EMAIL PROTECTED]; [EMAIL PROTECTED] > > Subje

Re: [Full-disclosure] A Botted Fortune 500 a Day

2007-04-13 Thread Dude VanWinkle
> From: poo [mailto:[EMAIL PROTECTED] > Sent: Friday, April 13, 2007 6:03 AM > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED]; > [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: Re: [Full-disclosure] A Botted Fortune 500 a Day > > > > gadi.. SHUT UP On 4/13/0

Re: [Full-disclosure] A Botted Fortune 500 a Day

2007-04-13 Thread Simon Smith
Just to add my two cents... The fact is that the cost in damages of a single compromise is usually far greater than the cost of implementing and maintaining good security. TJX is a golden example of that. On 4/13/07 11:05 AM, "Jamie Riden" <[EMAIL PROTECTED]> wrote: > Hi Steven, > > I believe

Re: [Full-disclosure] A Botted Fortune 500 a Day

2007-04-13 Thread Jamie Riden
Hi Steven, I believe security of an organisation is orthogonal to the number of employees/users and how savvy they are. It depends more on the will and resources to secure the network properly. Two, corporations do have many financial incentives to make sure they are secure - if they are doing the

Re: [Full-disclosure] A Botted Fortune 500 a Day

2007-04-13 Thread Steven Adair
> On 13/04/07, Steven Adair <[EMAIL PROTECTED]> wrote: >> Is this in anyway surprising? I think we all know the answer is no. >> Many >> Fortune 500 companies have more employees than some ISPs have customers. >> Should we really expect differently? > > Yes! Off the top of my head: > > 1. Corporat

Re: [Full-disclosure] A Botted Fortune 500 a Day

2007-04-13 Thread Jamie Riden
On 13/04/07, Steven Adair <[EMAIL PROTECTED]> wrote: > Is this in anyway surprising? I think we all know the answer is no. Many > Fortune 500 companies have more employees than some ISPs have customers. > Should we really expect differently? Yes! Off the top of my head: 1. Corporations should h

Re: [Full-disclosure] A Botted Fortune 500 a Day

2007-04-13 Thread Steven Adair
Is this in anyway surprising? I think we all know the answer is no. Many Fortune 500 companies have more employees than some ISPs have customers. Should we really expect differently? Also, as a side note, I would like to add that just because SPAM is coming from a certain gateway does not neces

Re: [Full-disclosure] A Botted Fortune 500 a Day

2007-04-13 Thread Randall M
Did someone get out of bed on the wrong side?? From: poo [mailto:[EMAIL PROTECTED] Sent: Friday, April 13, 2007 6:03 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [Full-disclosure] A Botted Fortune 500 a Day gadi.. SHUT UP On 4/13/07

Re: [Full-disclosure] A Botted Fortune 500 a Day

2007-04-12 Thread Knud Erik Højgaard
On 4/13/07, RMueller <[EMAIL PROTECTED]> wrote: > How is the information gathered? The page mentions different types of spam, so it's really just a matter of doing whois lookups / reverse dns checks and stuff like that to see where the stuff comes from. Once you filter out all the end user ranges

[Full-disclosure] A Botted Fortune 500 a Day

2007-04-12 Thread RMueller
Gadi wrote: -- Message: 8 Date: Wed, 11 Apr 2007 21:35:47 -0500 (CDT) From: Gadi Evron <[EMAIL PROTECTED]> Subject: [Full-disclosure] A Botted Fortune 500 a Day To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] Mess

Re: [Full-disclosure] A Botted Fortune 500 a Day

2007-04-12 Thread James Matthews
Maybe they can use this site also! On 4/11/07, Gadi Evron <[EMAIL PROTECTED]> wrote: Support Intelligence releases daily reports on different fortune 500 companies which are heavily affected by the botnet problem, with many compromised machines on their networks. You can find more information

[Full-disclosure] A Botted Fortune 500 a Day

2007-04-12 Thread Gadi Evron
Support Intelligence releases daily reports on different fortune 500 companies which are heavily affected by the botnet problem, with many compromised machines on their networks. You can find more information on their blog: http://blog.support-intelligence.com/ They are good people, and they know