Re: [Full-Disclosure] sco.com Press Release

[Nick FitzGerald <nick@virus-l.demon.co.uk>]

Valdis.Kletnieks@vt.edu wrote:

> This would be true if MyDoom showed any really creative innovation, like
> abusing a as-yet-generally-unknown 0day, or some novel approach to finding
> ways into a system.
> 
> If I was looking for holes, I'd pass on the MyDoom author and find out
> what Lie Die Yu was doing - the kind of thinking that went into the
> "Sis Step IE Remote Compromise Cache Attack" is what you want on your side.

Agree on both counts.

Mydoom -- like nearly all viruses -- is totally lame on the innovation 
front and (if the stories are to be believed) Microsoft must rue the 
day it stoped supporting Lie Die Yu...


Regards,

Nick FitzGerald

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html