My 1 3/4 cents.
Its way beyond the "stupidly misinformed" now.. It actually to a point
where MSCE means nothing more
then you are a danger to yourself and the network you are supposedly
supposed to safeguard. MCSE's are now a dime a dozen.. Pay your 1300.00
and you too can become one of the trained monkeys that can install Exchange
and IIS.. Woot! Another box in the open to exploit! When I first started
getting involved in the network admin/engineering field I met a few MCSE
guys.. They knew their way around windows, but I was dismayed at their
total lack of knowledge or understanding of "security". Sure, they had 3rd
party products they could throw into the box (ie black ice) and "think"
they were secure, but everyone knows, or more importantly SHOULD know of
Microsoft's many buffer overflow's. Granted, Unix/Linux is not without
their problems, but by and large they are the main targets any longer..
Until $MS gets their act together and put a serious effort to run Lint or
another C/C++ proofer over their code will any of these latest exploits be
under control. My guess.. We haven't seen anything yet... There will be
"THE" worm/exploit that does serious damage to machines and networks..
At 08:51 AM 8/1/2001 +0100, you wrote:
>In message <[EMAIL PROTECTED]>
> Mads Rasmussen <[EMAIL PROTECTED]> wrote:
>
> >
> > Saber como funciona o Worm, "code red"
> >
> > http://www.securiteam.com/windowsntfocus/5WP0L004US.html
> >
> > Mads
>
>It's only people, stupi^H^H^H^H^H misinformed enough to use a MS OS with
>IIS. This is 100% only an IIS virus. It infects nothing else.
>
>
>--
>Daniel Barron