[31303] in bugtraq
Re: msblast.d and a review of defensive worms
daemon@ATHENA.MIT.EDU (Nicholas Weaver)
Thu Aug 21 12:47:26 2003
Date: Thu, 21 Aug 2003 10:07:55 -0700
From: Nicholas Weaver <nweaver@CS.berkeley.edu>
To: "David J. Meltzer" <djm@intrusec.com>
Cc: bugtraq@securityfocus.com
Message-ID: <20030821100755.A16659@ring.CS.Berkeley.EDU>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20030818155038.C14607@ring.CS.Berkeley.EDU>; from nweaver@CS.berkeley.edu on Mon, Aug 18, 2003 at 03:50:38PM -0700
I think this article (posted on the Nanog list) should be the final
nail in the coffin on "defensive worms".
http://www.nwfusion.com/news/2003/0819navy.html
Reportedly 3/4s of the Navy Marines Corps Internet was unusable
because of the "beneficial" Welchia (patching RPC) worm. Network
operations is at least partially outsourced to EDS, but the article
doesn't state who is responsible for administering the machines.
--
Nicholas C. Weaver nweaver@cs.berkeley.edu
