RE: [Full-Disclosure] RE: Probable new MS DCOM RPC worm for Windo ws

[Jay Sulzberger <jays@xxxxxxxxx>]

On Fri, 26 Sep 2003, Schmehl, Paul L wrote:

> > -----Original Message-----
> > From: Gary Flynn [mailto:flynngn@xxxxxxx]
> > Sent: Friday, September 26, 2003 8:06 AM
> > To: 'full-disclosure@xxxxxxxxxxxxxxxx'
> > Subject: Re: [Full-Disclosure] RE: Probable new MS DCOM RPC
> > worm for Windo ws
> >
> >
> > I would think a better way of determining if a patch is
> > actually installed on a system is by examining the files on
> > the system rather than to depend upon symptoms (scanners) or
> > installation logs (registry entries).
>
> True, but *I'm* not going to physically touch (or even virtually touch)
> 2000+ machines looking at file properties.  Are you?
>
> Paul Schmehl (pauls@xxxxxxxxxxxx)

Why should not each and every machine report the status of its files?

oo--JS.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html