[61093] in North American Network Operators' Group
Re: Sobig.f surprise attack today
daemon@ATHENA.MIT.EDU (Jay Hennigan)
Fri Aug 22 15:01:20 2003
Date: Fri, 22 Aug 2003 11:49:24 -0700 (PDT)
From: Jay Hennigan <jay@west.net>
To: Owen DeLong <owen@delong.com>
Cc: nanog@merit.edu
In-Reply-To: <2147483647.1061551672@imac-en0.delong.sj.ca.us>
Errors-To: owner-nanog-outgoing@merit.edu
On Fri, 22 Aug 2003, Owen DeLong wrote:
>
> OK... Maybe I'm smoking crack here, but, if they have the list of 20
> machines,
> wouldn't it make more sense to replace them with honey-pots that download
> code to remove SOBIG instead of just disabling them?
>
> Let's use the virus against itself. At this point, I think that's a
> legitimate
> countermeasure.
Start coding, you've got twelve minutes.
--
Jay Hennigan - CCIE #7880 - Network Administration - jay@west.net
WestNet: Connecting you to the planet. 805 884-6323 WB6RDV
NetLojix Communications, Inc. - http://www.netlojix.com/