> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > Brandon Butterworth > > Or they may be happy thinking their NOC is more 0day virus proof rather > than hoping a 3rd party will update their scanner in time > > Who'd want to risk the NOC falling to the same problem that's just > taken out the network they're trying to fix? > > brandon
A NOC or abuse desk that figuratively puts its hands over its eyes by blocking a signficant subset of trouble reports is arguably as useless as one that is hit by a virus. The most clueful reports are going to be the ones with some evidence attached or included. I think the point was that there are some other alternatives between the two opposing extremes of bouncing all email with text attachments on the one hand and leaving yourself completely unprotected on the other.
