RE: [Full-Disclosure] Authorities eye MSBlaster suspect

["Schmehl, Paul L" <pauls@utdallas.edu>]

> -----Original Message-----
> From: morning_wood [mailto:se_cur_ity@hotmail.com] 
> Sent: Friday, August 29, 2003 11:19 AM
> To: Charles Ballowe; full-disclosure@lists.netsys.com
> Subject: Re: [Full-Disclosure] Authorities eye MSBlaster suspect
> 
> 
> if the worm was active in anticipation of a patch that 
> intoduced a new exploit vector and it took advantage of that, 
> is'nt the vendor ( microsoft ) to blame then? As well there 
> was plenty of advanced warning on this exploit long before 
> msblast was an issue. It seems to me that it is each admins 
> responsiblity, if they were affected ( infected ) not the 
> coder. if this were the case the LastStage(of)Delerium would 
> be the blamed party for developing and releasing the exploit, 
> but alas.. they are not of USA orgin. SUE LITIGATE BLAME PROCECUTE
> 
So you would blame murder victims for being in the wrong place?  Or rape
victims for wearing the wrong clothing?

Nice set of ethics there.

Paul Schmehl (pauls@utdallas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/ 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html