OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: [Full-Disclosure] MyDoom.b samples taken down

From: Steve Wray (steve.wrayparadise.net.nz)
Date: Mon Feb 02 2004 - 02:11:12 CST

> From: full-disclosure-adminlists.netsys.com
> [mailto:full-disclosure-adminlists.netsys.com] On Behalf Of
> Bill Royds
[snip]
> To amateur "virus researchers", unless you have a "Clean
> room" to test the virus (a completely isolated computer network with
the
> ability to catch all possible traffic and machine state changes), you
have little
> likelihood of finding something new before you re-infect the Internet
with
> the virus.

I second that, and would like to add the phrase 'air gap'
:)

Its an important notion.

The ability of nasties to get from the clean room to machines
on your LAN or the internet should be limited to the capacitance
of thin air. No wires.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html