OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-Disclosure] ASN.1 telephony critical infrastructure warning - VOIP

Valdis.Kletnieksvt.edu
Date: Wed Feb 18 2004 - 10:22:54 CST


On Wed, 18 Feb 2004 13:27:54 +0100, jan.muenthernruns.com said:
>
> I don't want to take this discussion too far, but I really wonder why
> everybody focuses on worms - as if the threat a dedicated and targeted
> attack poses was any lower...

We don't see dedicated and targeted attacks at 4 million cablemodem users
designed to drop off trojans, ddos zombies, and similar.

Many of the worst "dedicated and targeted attacks" of late presuppose the
presence of a zombie net - preventing the formation of such a net then makes
the attack a lot harder to carry out.

And for that matter, installation of a keystroke logger to sniff out credit card
numbers *IS* a dedicated and targeted attack - on the credit card system.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001

iD8DBQFAM5FecC3lWbTT17ARAgweAKDsWHrUfEi9Fbw1RV0krt6US2BVJwCg0ZZG
MM8//onMy//4hstPjMB021s=
=s3tI
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html