[55865] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Symantec detected Slammer worm "hours" before

daemon@ATHENA.MIT.EDU (hostmaster)
Thu Feb 13 12:55:01 2003

Date: Thu, 13 Feb 2003 19:50:30 +0200
To: nanog@merit.edu
From: hostmaster <hostmaster@nso.org>
In-Reply-To: <Pine.GSO.4.44.0302131150230.17518-100000@clifden.donelan.c
 om>
Errors-To: owner-nanog-outgoing@merit.edu



DeepSight is SecurityFocus. Their claim may have some truth in it. But, so 
does the 19000+ partners. They mean customers....but not necessarily 
customers/ subscribers to DeepSight. (they may have 'accidentally' included 
all their SecurityFocus lists' subscribers in that number as well 
:).   Though I do appreciate the SF team, I haste to add that this 
revelation smells seriously commercially tainted. All of the major networks 
would see such anomaly pretty fast, and at virtually the same time.  This 
is however the right moment to underscore 'corporate fears', and bring 
attention to their relatively new service/product.

cheers
Bert
director research
nso/ft. myers


home help back first fref pref prev next nref lref last post