Re: [Full-Disclosure] Super Worm
Date: 04/20/04

  • Next message: Vincenzo Ciaglia: "LNSA-#2004-0011: CVS Server and Client Vulnerabilities"
    Date: Mon, 19 Apr 2004 18:35:51 -0400

    On Mon, 19 Apr 2004 16:01:49 CDT, said:

    > "...without those dimwits..." "...stupidity of end users..."
    > of hands please; how many of us systems wizards can do
    > the jobs the "dimwits" are doing? You infosec guys at any
    > heart transplants lately? Infosec guy at investment structure
    > any billion dollar mergers last week? No? Well what not?? Are you some
    > kind of dimwit?? Are you stupid???

    No, I don't pretend to know how to do a heart transplant, or understand all the
    details of what my researchers are doing. They explain what computer resources
    they need to get their work done, and it's *my* job to talk to them, in
    language they can understand, and figure out what they need:

    "I need e-mail - with pictures.."
    "How big a picture?"
    "They're x-rays of horse joints"
    "Can you show me an example?"

    <poke around on disk, find how many megabytes one is, and how many a day they
    need, and now long to retain them, and stuff like that - things that *they*
    know the answer to - 25/day, need to keep for a year>

    And in a perfect world, I return with a complete solution - hardware, software,
    training, and support. In the real world, I come back with as much of it as I
    can swing out of the resources available.

    However, your analogy breaks down here:

    I have enough sense to know the limits of my knowledge and stay away from
    scalpels. It's the heart surgeons that put down scalpels and start fooling
    around with that Administrator account that tick me off.

    And given that I'd get arrested the 3rd time I tried to perform surgery,
    I think I'm morally justified if I get ticked the 3rd time that surgeon
    practices sysadminning without a license. ;)


    Full-Disclosure - We believe in it.

  • Next message: Vincenzo Ciaglia: "LNSA-#2004-0011: CVS Server and Client Vulnerabilities"