Hi there.. Some time ago we spoke at the FIRST conference in Ottowa, Canada (www.first.org) about a very destructive worm.
The paper really focusses on a web server based worm, but ideas and theories behind it can be applied to any type of worm - Blaster included. The paper can be found at http://www.sensepost.com/misc/FIRST-final.htm. Flames to /dev/null, comments welcome... Regards, Roelof. ===================== Roelof Temmingh [EMAIL PROTECTED] +27 12 667 4737 GMT+2 ===================== On Tue, 12 Aug 2003, Kalleth wrote: > Just reading through how easily this worm (RPC/DCOM/MSBlast) is spreading, > and how widespread it is, and the potential number of infected systems - do > some of you lot think its feasible that sometime in the future someone will > release a worm that DOES completely wipe the hard disks or do something > equally nasty to its host AFTER sending itself on to 'x' recipients? a worm > like that, although i'm hardly qualified to give an opinion, could seriously > affect a very large quantity of home users - the majority of whom never > bother updating their OS from the day its installed from the CD. > Myself, i find a worm that is able to spread this easily as > rather..disturbing. > Does anyone else predict (drum roll and overreacting music please..) a > "doomsday" where nearly every PC running windows (which, lets face it, is > the predominant OS out there at the moment) thats connected to the internet > gets taken offline, hard drives wiped? information loss would be terrible ;p > > thoughts? > > Tom Russell. > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.netsys.com/full-disclosure-charter.html > > _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
