Re: [cobalt-security] are these worm files?

["Adam Sculthorpe" <sculthorpe@xxxxxxxxxxxxx>]

Absolutely, it's my dry british sense of humour for anyone that missed that aspect
of my comments and I don't condone that type of behaviour at all, it does however
promote the thinking that for those with a large number of RAQ's there is always a
way to speed up applying those patches!

It saddens me to see this type of a breach because I am 99% certain the attack
wouldn't have been successful if he had applied the appropriate updates, I hope
others on this list learn from it and get their systems sorted quickly.

The fact is, if you don't then you are in big trouble!

*********** REPLY SEPARATOR  ***********

On 26/03/2001 at 01:34 Gossi The Dog wrote:

>On Mon, 26 Mar 2001, Adam Sculthorpe wrote:
>
>>
>> Someone should write an ethical worm that breaks into the system,
>secures it then leaves !
>>
>> Gossi, are you up for it? :)
>
>Certainly, but I know from past experience if admins notice, they tend to
>not realise you are doing them a favour securing the system, and instead
>send the FBI/MI5/MIB/Whoever around to break 'yer legs.
>
>Seriously, doing anything like that is asking for trouble.  It'd actually
>be fairly easy to code a modified version of Ramen and Lion to patch
>Redhat/SuSE/Debian etc, however I don't feel inclined to play around for
>above reasons.
>
>_______________________________________________
>cobalt-security mailing list
>cobalt-security@xxxxxxxxxxxxxxx
>http://list.cobalt.com/mailman/listinfo/cobalt-security