re: Actual Security Cases

From: H C <keydet89(at)yahoo.com>
Date: Sun Feb 02 2003 - 09:02:20 EST

> On the other hand, users setting up their own
dial-in
> modems at their desks is virtually impossible to

Actually, it's not all that difficult. Configure the phone switch such that those dial-out lines that you do need do not havd DiDs, and cannot be dialed into. Then, get yourself something like my mdmchk.pl to scan for installed modem drivers on desktops.

> The "Lioten" worm that struck in early December used

> a short list of trivial passwords such as "12345".

Another excellent example of how a relatively 'dumb' piece of computer code can run the Internet and outsmart the admins...

---

Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now. http://mailplus.yahoo.com Received on Mon Feb 3 15:03:20 2003