Re: [Full-Disclosure] When do exploits get used?

2004-03-24 Thread Luke Norman
I wonder if anyone has actually newly connected to the Internet in the last 6 months. Anybody buying a new XP computer that has a network connection will be infected by MSBlaster and find their machines almost unusable. People on this list would probably know how to disable the reboot for

Re: [Full-Disclosure] When do exploits get used?

2004-03-23 Thread Jay Beale
Luke Scharf wrote: On Mon, 2004-03-22 at 17:13, Jay Beale wrote: You may find this discussion academic. But the exploit writers and the worm writers are getting faster. And that's what should scare us into moving beyond patches. That's what should get us moving to better network and host

Re: [Full-Disclosure] When do exploits get used?

2004-03-22 Thread Luke Scharf
On Mon, 2004-03-22 at 14:46, Paul Schmehl wrote: To think otherwise is foolish, as I said. If one isn't paranoid, one probably doesn't belong in the security field. If you're sitting back thinking you're safe because you're patched and you patch quickly, then you're unalert and exposed.

Re: [Full-Disclosure] When do exploits get used?

2004-03-22 Thread Jay Beale
Luke Scharf wrote: On Mon, 2004-03-22 at 14:46, Paul Schmehl wrote: To think otherwise is foolish, as I said. If one isn't paranoid, one probably doesn't belong in the security field. If you're sitting back thinking you're safe because you're patched and you patch quickly, then you're

Re: [Full-Disclosure] When do exploits get used?

2004-03-22 Thread Dave Aitel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jay Beale wrote: | Luke Scharf wrote: | | On Mon, 2004-03-22 at 14:46, Paul Schmehl wrote: | | | To think otherwise is foolish, as I said. If one isn't | paranoid, one probably doesn't belong in the security field. | If you're sitting back thinking

RE: [Full-Disclosure] When do exploits get used?

2004-03-22 Thread Bill Royds
: Paul Schmehl; [EMAIL PROTECTED] Subject: Re: [Full-Disclosure] When do exploits get used? On Mon, 2004-03-22 at 17:13, Jay Beale wrote: You may find this discussion academic. But the exploit writers and the worm writers are getting faster. And that's what should scare us into moving beyond

RE: [Full-Disclosure] When do exploits get used?

2004-03-22 Thread Michael Cecil
At 09:07 PM 3/22/2004, Bill Royds said: My daughter had to re-install part of Windows XP from CD because of some disk problems. She forgot to take the machine off the Internet while doing it and was infected immediately by MSBlaster as soon as the CD restored some older DLL code. You should make