Vulnerability Development mailing list archives
RE: Publishing Nimda Logs
From: Jose Nazario <jose () monkey org>
Date: Wed, 8 May 2002 13:56:00 -0400 (EDT)
On Wed, 8 May 2002 brossini () csc com au wrote:
It would, however, be pretty niave of us to think that attackers couldn't find lists of infected machines by other means.
so the issue isn't "attackers can't get this info by other means". it's that the quanitity of information would be greatly enhanced by this kind of action, publishing logs. i have lists from networks i sit on, including my cable modem's network. moderatly saavy attacks do, too. there is no reason, though, why someone should help them get an order of magnitude more hosts. that's the issue, that in publishing these logs you are explicitely helping any attackers gather this info. ___________________________ jose nazario, ph.d. jose () monkey org http://www.monkey.org/~jose/
Current thread:
- Re: Publishing Nimda Logs, (continued)
- Re: Publishing Nimda Logs Lincoln Yeoh (May 08)
- RE: Publishing Nimda Logs Eli K. Breen (May 07)
- RE: Publishing Nimda Logs Andy Wood (May 08)
- Re: Publishing Nimda Logs Nick Lange (May 08)
- RE: Publishing Nimda Logs Andy Wood (May 08)
- Re: Publishing Nimda Logs warchild (May 07)
- Re: Publishing Nimda Logs Boyd Lynn Gerber (May 08)
- Re: Publishing Nimda Logs mlafon (May 07)
- RE: Publishing Nimda Logs Silcock, Stephen (May 07)
- RE: Publishing Nimda Logs brossini (May 08)
- RE: Publishing Nimda Logs Andy Wood (May 08)
- RE: Publishing Nimda Logs Jose Nazario (May 08)
- Re: Publishing Nimda Logs Clinton Smith (May 08)
- RE: Publishing Nimda Logs Alexander Sarras (ABG) (May 08)
- RE: Publishing Nimda Logs Ron DuFresne (May 08)
- Re: Publishing Nimda Logs zeno (May 08)
- Re: Publishing Nimda Logs Raistlin (May 08)
- Fw: Publishing Nimda Logs Knud Erik Højgaard (May 08)
- RE: Publishing Nimda Logs Healy, S. S., CTM2 (May 08)
- Re: Publishing Nimda Logs Knud Erik Højgaard (May 08)
- is: greyhat virus was Re: Publishing Nimda Logs Matthew McGehrin (May 08)
- Re: Publishing Nimda Logs Meritt James (May 08)
(Thread continues...)