Security Incidents mailing list archives

Re: Large quantity of traffic from amazon.com - source_port 3000


From: dbrez () AMAZON COM (Dominique Brezinski)
Date: Tue, 18 Jan 2000 10:11:22 -0800


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

At 09:36 AM 1/18/00 -0600, Andrew Steingruebl wrote:
Thanks for the good response.  I'm cc'ing the whole list on this message.

I've seen several people respond with explanations of strange behavior coming
from their sites.  Its nice to know that a good number of people are reading
this list.  At the same time, without knowing exactly how the list is set up,
and even if I did, its pretty easy to forge email.  I'd like to suggest that
people, wherever possible, when making an quasi-official response to an
incident, PGP or S/MIME sign their email so as to give other people at least
some comfort or verifiable information that the response is genuine.

Yes, you are right.  I ran in over the weekend to get a quick response out,
and I overlooked signing the mail.  Point well taken.
- ---
Dominique Brezinski             Amazon.com Security
office (206) 266-6900           pager (888) 916-2747
8312 ADAB C5B2 1916 CBD8  150E 37CE 044E F45F B5E4
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.0.2

iQA/AwUBOISsyjfOBE70X7XkEQItwACeIGXfBrobGao1Pw4S0AurgATwL5QAoO+f
HKont96tX7Wtdf0FqRj+5J8M
=Y851
-----END PGP SIGNATURE-----


Current thread: