Re: [Full-disclosure] Sasser

You're right that this isn't normally how school procurement works.
However, it is possible. I also don't think it would be the sysadmin's
job to help with a networking class.

Matt

ericscher@xxxxxxx wrote:

Matt -

Your comments are entirely logical, reasonable and correct.

They are also completely unrelated to the way school systems actually
function.


That aside...
Ask yourself this: Why is this guy asking for help HERE?
As opposed to seeking the help of the sysadmins that the taxpayers have
already provided for the schools.

There are three likely explanations:
1. He already asked and was firmly told NO.
2. He knows better than to ask.
3. He is not who he says he is.

What people do with hardware that THEY own is their business.
What people do with OUR hardware is OUR business.

============================================================
From: Matthew Flaschen <matthew.flaschen@xxxxxxxxxx>
Subject: Re: Sasser or other nasty worm needed

What budget? Every school that would have a networking
class also has obsolete computers. Take a dozen, reformat
them, put on an unpatched version of Windows, pull out
or disable wifi, and connect them all to a switch
(also probably available second-hand). Ensure neither
computers nor switch are connected to any other network.
Sure, you have to be sure not to f* it up, but it doesn't
cost anything. Set-up sasser on one by moving it off a CD-R.
Wait. :) This should cost little or nothing.

Matt Flaschen
============================================================

--------------------------------------------------------------------
mail2web - Check your email from the web at
http://mail2web.com/ .


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Relevant Pages

  • Re: You have to be psychic to get a job
    ... A person just finishing school asked a question about ... Dave never talks about this. ... I see the two kinds of networking as vastly different. ... However, he was right if you have a decent resume that would get you interviews because if you don't get interviews, then there is no chance. ...
    (sci.research.careers)
  • Re: [Full-disclosure] Sasser
    ... I think this depends a lot the size of the school. ... a student technology club that meets every week (which I would say is ... between the vlans, all vlans are only allowed to directly access the ... Here in the states it's usually the networking class teacher that ...
    (Full-Disclosure)
  • Re: [Full-disclosure] Should I Be Worried?
    ... think twice about actually going public with my school's security hole by having school notify students, parents and/or faculty at risk due to it. ... Full-Disclosure - We believe in it. ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
    (Full-Disclosure)
  • Re: [Full-disclosure] Should I Be Worried?
    ... If it is another school, maybe all these break-in news reports will ... Full-Disclosure - We believe in it. ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
    (Full-Disclosure)
  • Re: [Full-disclosure] Should I Be Worried?
    ... twice about actually going public with my school's security hole by having ... school notify students, parents and/or faculty at risk due to it. ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
    (Full-Disclosure)