🚀 go-pugleaf

chatting with Colin Bloch <colin@NOSPAMgrandecom.com> :
>> I wonder sometimes if such worms are written by people disgusted with the
>> deficiencies in current platforms: talking to MicroSloth (and sendmail,
>> for that matter)
> Sendmail is an MTA & whatever security issues its had in the past have had
> nothing to do with the spread of worms.

	I mentioned SENDMAIL more as an afterthought (regarding to attempts
	to warn and alert rather as being "exploitable" rather than connecting
	it to this or any worm in particular.


>> this particular attack is targetting the USEnet community as a whole
> No its not.

	yes, it is.  Not only -- it also targets IRC'ers and others -- but
	if you get hit because you actively post to USEnet, you *KNOW* that
	you have been targetted ("also" is irrelevant to you)

	
>> those who don't post there should see little...

	I probably should have said "few(er)"

> No they shouldn't.  It spreads through Kazaa, Email, mapped drives, IRC

	you just like to say "no" more than "yes" and I don't care for those
	kind of debates much.  let's try to "add" to our mutual insights
	rather than "subtract"...


> and yes, will randomly post to newsgroups on your configured news server...

	it posts to newsgroups?  that's news to me...  it emails itself to
	addresses it finds in posted news-articles (is what I understood to
	be the case)

> However there is no "targeting" nor any group at risk more than any other.

	*I* know that *I* am "targetted" (flooded is more like it) *because*
	I post to USEnet...  *You* can of course believe whatever you want...


> http://securityresponse.symantec.com/avcenter/venc/data/w32.swen.a@mm.html

	indeed they claim that it posts itself to newsgroups... hmmm...
	well, just more proof that USEnet users are being targetted (though not
	exclusively) -- you are also free not to choose that word to describe
	the situation, of course...


p.s.: I'm dropping out of this thread at this point.  it's not germane to the
	groups it is posted in, I'm afraid...

-- 
  /"\      ASCII...       ._.    ||   Stop Verisign DNS Abuse Petition 
  \ /     on Usenet       /v\    ||       www.whois.sc/verisign-dns
   X    ANYTHING ELSE   /(   )\  ||      "Don't Mess With Penguins!!"
  / \    IS BLOAT !!     ^^ ^^   ||       OPT-OUT is *UNACCEPTABLE*