[mso] Re: exe files

  • From: "Greg Chapman" <greg@xxxxxxxxxxxxx>
  • To: <mso@xxxxxxxxxxxxx>
  • Date: Sat, 30 Aug 2003 21:32:40 -0500

I just thought of allegory for my last response to you. Check this:
>My computer is protected just as yours is, 
> but I don't like someone telling me how to use it.

So, you're sitting in an IRC room, say #2600, one day and some goon
posts you the mechanics of overflowing the RPC buffer for IPC in the
NetBIOS stack on Win32 systems. You see this thing, think about it for a
moment and decide you'll wrap that up with an IP incrementing routine
based on Class B addressing and throw in a little bone to cause this
thing to spread itself to other systems and TFTP to get that propagation
mechanism down to keep your initial payload light and nimble. Oh, yeah!
Let's not forget to add a little text missive to lecture Mr. Gates about
the responsibilities of being rich!

Congrats, you've created MSBlaster (the first one). You and your buddies
anonymize the spread of this little jewel by posting to the immediately
unprotected clients of another IRC channel using a bot, leave the room
immediately and even close the channel and, Presto! It's in the wild!!

At what point do you think someone should have told you what to do with
your computer? I mean, after the fact, some anatomically impossible
suggestions come to mind so we'll leave that time period out of the
question.<g>

For doing all this, were you?
- irresponsible
- malicious
- abusive
- doing your duty to improve worldwide system security
- passing an important message to Bill G
- all of these
- none of these

Thanks for giving it some thought.

Bringing this back to Office, I'd say that it's true that having your
attachments blocked is annoying as can be. But I don't think we can be
so completely annoyed that some external entity creates its software
with deliberately hobbled functions and still manages to get people to
use it in that state. I mean, I sure wish we could have hobbled that kid
in the IRC chat room *before* his poor sense of responsibility impacted
us all.

Greg Chapman
http://www.mousetrax.com 
"Counting in binary is as easy as 01, 10, 11!
With thinking this clear, is coding really a good idea?"


> -----Original Message-----
> From: mso-bounce@xxxxxxxxxxxxx 
> [mailto:mso-bounce@xxxxxxxxxxxxx] On Behalf Of Richard Davisson
> Sent: Saturday, August 30, 2003 9:34 PM
> To: mso@xxxxxxxxxxxxx
> Subject: [mso] Re: exe files
> 
> 
> Don't you think that the root cause of all of this should be 
> taken care = of? My computer is protected just as yours is, 
> but I don't like someone = telling me how to use it.  It is 
> not my fault that there are bored = assholes out there with 
> nothing to do but make virii.  It just happens = to be my 
> choice that I choose to protect what I have with AV software 
> = and the like.  It doesn't make me a bad or irresponsible 
> person if I = choose not to.  Yes, maybe irresponsible to 
> myself, but certainly not = others. =20 Richard L. Davisson 
> http://www.groups.yahoo.com/group/WhatsonmyPalm
> We do not have to visit a madhouse to find disordered=20
> minds; our planet is the mental institution of the universe.
>                                                 Johann von Goethe
>

*************************************************************
You are receiving this mail because you subscribed to mso@xxxxxxxxxxxxx or 
MicrosoftOffice@xxxxxxxxxxxxxxxx

To send mail to the group, simply address it to mso@xxxxxxxxxxxxx

To Unsubscribe from this group, send an email to 
mso-request@xxxxxxxxxxxxx with the word "unsubscribe" (without the quotes) in 
the subject line.

Or, visit the group's homepage and use the dropdown menu.  This will also allow 
you to change your email settings to digest or vacation (no mail).
//www.freelists.org/webpage/mso

To be able to use the files section for sharing files with the group, send a 
request to mso-moderators@xxxxxxxxxxxxx and you will be sent an invitation with 
instructions.  Once you are a member of the files group, you can go here to 
upload/download files:
http://www.smartgroups.com/vault/msofiles
*************************************************************

Other related posts: