my stance is that as a entity on the internet, it is the responsibility of the person or orginization that connects to a hostile enviroment to ensure themselves a reasonable ammount of protection.
my "murder" analogy, applies to the ATTITUDE of said person/orginazation and the general internet public. Im not blaming a person for being attacked in the real world. how can i set the frame here.. ok, i was not affected by the msblast worm because of measures i have in place, and have had before and during the attack of this vunerability. but if i had NOT been, the responsibility would lie solely with ME in my failure to protect myself ( and my network ) in that hostile environment, thus if i blame some other party ( LSD, micro$sotf, or msblaster coder ) i am shifting the blame away by way of the "poor me" scenario. i apologize for not being clear in the first place and i can see how it could be looked at differently. Personally I have never been the one of "they deserved it" when it comes to a crime against humans with your examples stated. ( rape victim dress or protection from a bullet ) thank you, Donnie Werner ----- Original Message ----- From: "Schmehl, Paul L" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, August 29, 2003 1:12 PM Subject: RE: [Full-Disclosure] Authorities eye MSBlaster suspect > > -----Original Message----- > > From: morning_wood [mailto:[EMAIL PROTECTED] > > Sent: Friday, August 29, 2003 3:04 PM > > To: Schmehl, Paul L; [EMAIL PROTECTED] > > Subject: Re: [Full-Disclosure] Authorities eye MSBlaster suspect > > > > > So you would blame murder victims for being in the wrong place? Or > > > rape victims for wearing the wrong clothing? > > > > > > Nice set of ethics there. > > > > NO !!! > > i think you mixed the top portion of my post with the "poor me" > > examples on the bottom, i blame the person that commits the > > act gimme a break, and quit trying to miscontrue things Paul > > > What did I misconstrue? You stated that you believed that admins were > at fault for worm infections. I quote, "It seems to me that it is each > admins responsiblity, if they were affected ( infected ) not the coder." > > What about your statement quoted here did I misconstrue? Admins are > affected by worms the same way that a crime victim is affected by the > crime committed against them. Some argue they were in the wrong place > or they were dressed wrong or they should have known better than to be > where the criminal was. Your argument is essentially the same, is it > not? > > Paul Schmehl ([EMAIL PROTECTED]) > Adjunct Information Security Officer > The University of Texas at Dallas > AVIEN Founding Member > http://www.utdallas.edu/~pauls/ > _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
