[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Full-disclosure] Oh Yeah, botnet communications
- To: full-disclosure <Full-Disclosure@xxxxxxxxxxxxxxxxx>
- Subject: [Full-disclosure] Oh Yeah, botnet communications
- From: T Biehn <tbiehn@xxxxxxxxx>
- Date: Thu, 19 Feb 2009 23:13:38 -0500
You know how the current amateur botnet offerings are basing domain lists
off the current time to allow the 'good guys' to prepare?
Why not base the seed off something like a news RSS feed? I asked some
whitehats when I was ruined in Washington DC and they couldn't tell me.
News isn't predictable but is globally shared on a given day.
-Travis
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/