Security Incidents mailing list archives

Re: Code Red, anyone?


From: "S. Staniford" <stuart () SiliconDefense com>
Date: Tue, 31 Jul 2001 20:06:22 -0700

:-)

As I write this it's about three hours after midnight UTC.  Even if there was
going to be a significant infection, we'd only be about one doubling time into
it - probably still below the radar screen.  Exponential ramp-ups take a while
to show up as they build to the point of visibility, and then grow rapidly.
However, I share your scepticism of the recent hype on this particular worm.
Seems to me most of the infectable systems will have been patched since last
time around, and assuming it takes off at all, the spread will be significantly
slower and a lot fewer systems will be affected.  (Unless someone has a new toy
to let loose).

Stuart.

Alfred Huger wrote:

I realize that most of you have taken shelter and are awaiting the
impending demise of the Internet as we know it. However for those of you
stalwart bastions of courage who are still manning the ship in the face of
this clear and present danger, I have a question. Anyone seeing Code Red
activity yet?

I just took a poll through our sensors in ARIS and see almost no activity
at least none worth commenting on. Anyone else?

VP Engineering
SecurityFocus.com
"Vae Victis"

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: