🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: sci.electronics.design
Article #2583

Re: Worm and Virus attack

#2583
From: Keith R. Williams
Date: Sat, 20 Sep 2003 18:29
53 lines
3591 bytes
In article <bkgr52$jrv$0@216.39.172.65>, 
walterh@cafewalterNOSPAM.com says...
> "Keith R. Williams" <krw@attglobal.net> wrote in message
> news:MPG.19d58c8293528ff598a6c3@enews.newsguy.com...
> > [...] as long as the world runs on M$
> > trash, we're going to have these problems.
> 
> We'll have these problems for longer than that.  Indeed, we'll have these
> problems for as long as email does more than convey plain text and the
> Internet supports sending of nonsecure messages.  May I remind folks that
> MSFT didn't invent the bug, and that the first worms were not on Windows?
> Virus writers target whatever platform is dominant and powerful enough to
> propagate the virus.  *All* nontrivial platforms have bugs that can be
> exploited given enough interest.

Certainly worms have been around since the beginning of computers 
(even before email). However OE makes the propagation totally 
transparent. YOY does anyone make attachment auto-execute even a 
possibility, much less the default?

Essentialy worms/viruses are allowed to propagate like wildfire 
because we have such a mono culture.  A little diversity wouldn't 
hurt, along with a certain software manufacturer that cares 
something about security.
> 
> If you want to not catch viruses, you have two choices: adopt a non-dominant
> platform (and accept that many programs will not be available to you) or
> adopt the dominant program, keep it aggressively up to date, and take
> precautions.  

The problem with this particular worm is that it's effectively a 
DoS attack on the entire Internet.  I don't *have* to be infected 
to have wasted many hours cleaning up.

> If you want to not receive virus-related mail, you have two
> choices: don't let anyone know your email (and accept that many people won't
> be able to reach you easily)

I won't get a virus if I never power the computer on either. 
...hardly a good choice.

> or install effective filtering mechanisms,
> ideally upstream from your inbox.

Which is what I've spent most of today doing.  It's a PITA 
though.  I finally figured out that they aren't using the "To:" 
or "CC:" for the address, so I've filtered on these.  It's still 
a PITA because my ISP doesn't do complex filtering, so I had to 
do an "OR" by shuffling the email off to another account if it 
was addressed to me.

-- 
  Keith
Technical Details
Message-ID: <MPG.19d6669c5f702b7898a6c9@enews.newsguy.com>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!cyclone.bc.net!newshub.sdsu.edu!tethys.csu.net!pln-w!spln!dex!extra.newsguy.com!newsp.newsguy.com!enews4
References: <3f4939c.0309190951.5ee61d08@posting.google.com> <5pgmmv03dmmae8nlsdni4bkio3erd9h4gq@4ax.com> <bkfjrj02ee@drn.newsguy.com> <3qlmmv8utg4kia66g7eiu67ajosko6dj3e@4ax.com> <3emmmvksd41k7k3eh003q1cq8af34ej9k9@4ax.com> <fhnmmvgkqt3edlqntpllk7omgth6t975m1@4ax.com> <3f6b9100.58172247@news.planet.nl> <bkgdd002ku0@drn.newsguy.com> <MPG.19d58c8293528ff598a6c3@enews.newsguy.com> <bkgr52$jrv$0@216.39.172.65>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 112d1e,4a531e8bd9cad7b2
X-Google-Attributes: gid112d1e,public
X-Google-Thread: 113866,4a531e8bd9cad7b2
X-Google-Attributes: gid113866,public
X-Google-ArrivalTime: 2003-09-20 11:50:37 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!cyclone.bc.net!newshub.sdsu.edu!tethys.csu.net!pln-w!spln!dex!extra.newsguy.com!newsp.newsguy.com!enews4
From: Keith R. Williams <krw@attglobal.net>
Newsgroups: sci.electronics.design,austin.internet
Subject: Re: Worm and Virus attack
Date: Sat, 20 Sep 2003 14:29:33 -0400
Organization: http://extra.newsguy.com
Lines: 53
Message-ID: <MPG.19d6669c5f702b7898a6c9@enews.newsguy.com>
References: <3f4939c.0309190951.5ee61d08@posting.google.com> <5pgmmv03dmmae8nlsdni4bkio3erd9h4gq@4ax.com> <bkfjrj02ee@drn.newsguy.com> <3qlmmv8utg4kia66g7eiu67ajosko6dj3e@4ax.com> <3emmmvksd41k7k3eh003q1cq8af34ej9k9@4ax.com> <fhnmmvgkqt3edlqntpllk7omgth6t975m1@4ax.com> <3f6b9100.58172247@news.planet.nl> <bkgdd002ku0@drn.newsguy.com> <MPG.19d58c8293528ff598a6c3@enews.newsguy.com> <bkgr52$jrv$0@216.39.172.65>
NNTP-Posting-Host: p-649.newsdawg.com
X-Newsreader: MicroPlanet Gravity v2.60