[AusNOG] FW: The worst thing about the exploit -- Have you done your part?

[Tom Storey]

http://www.networkworld.com/news/2008/073008-dns-attack-writer-a-victim.html

AT&T - one company who hasnt patched all of their servers yet, and has
been a victim of a poisoning attack. Ironically it caught out the person
(well, his company) who created the exploit kit. :-)

> On Mon, 2008-07-28 at 10:46, jay binks wrote:
>
>> its probably quite easy to guess who, but is it worth a name & shame.
>> A bit of bad publicity may get them patched :)
>
>
> Not a bad idea Jay :)
>
>
>> maybe a front page wingepool "story" on 1 month later, and these
>> networks still have vulnerable DNS servers :)
>>
>
>
> I wouldnt waste my time with whingepool, that wont get any real action
> in these areas, not with the people concerned here, but Commsday and/or
> AustralianIT stories certainly would.
>
>
>> maybe thats just nasty. ( or asking for them to be exploited )
>> but it may get some action.
>>
>
>
> Nasty indeed, but given how nasty this problem is if they don't get off
> their lazy asses and spend no more than 2 mins per machine to fix it, I
> think it's worth it to get their attention
>
> I also wouldn't just do them, I'd test all the well known services and
> name and shame them all, not just target the two largest, because I can
> tell you I've tested a couple of the small ones and they have had some
> machines fail, but some pass  (perhaps distracted NOC staff?), but
> either way, two weeks later, it really shows how outright lazy some of
> the network operations staff are, and shows the contempt they have for
> their customers, remember them? they are not hardly important to some,
> after all they are only the ones really paying their salaries, Ok, sure
> we all like to have a quiet time, chat, joke around and drink coffee,
> but FFS, when there's work to be done, there is work to be done, are
> they scared they will miss out on a couple cans of coke, or a couple
> coffees if they have to do some work. .. *sigh*  I've  couldnt begin to
> count the many cold coffees i've ended up over the years because
> something serious needed immediate attention.
>
> /end rant       :)
>
> Cheers
> Noel
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>