Security Incidents: Re: Dial-Up Percentage Abuse

[<measl () mfn org>]

NANOG might be a good starting point.


On Thu, 6 Jun 2002, Chris wrote:

> Date: Thu, 6 Jun 2002 17:40:07 -0700
> From: Chris <brahma () mendolink com>
> To: incidents () securityfocus com
> Subject: Dial-Up Percentage Abuse
>
> Sorry if this is a bit off topic but I really didn't know any other lists
> closer to my question.  I was wondering if anyone would know where I could
> obtain factual information regarding Dial-Up account abuse in conjunction
> with weak passwords.  A study or information gathered by a credible source.
>
> As in someone brute forcing/guessing/conning a password for a dial-up
> account and using that account to launch attacks on systems and do generally
> malicious things.  I am trying to show the importance of forcing customers
> to select secure passwords (8 char+ w/ numbers, letters and other printable
> char) to my staff.  Any suggestions would be great.
>
> Thank You,
>
> Chris D.
> Network Security
> Mendo Link, LLC
>
> "An Ounce Of Prevention Is Worth  A Pound Of Cure."
> Om Namo Narayanaya
>
>
> ----------------------------------------------------------------------------
> This list is provided by the SecurityFocus ARIS analyzer service.
> For more information on this free incident handling, management 
> and tracking system please see: http://aris.securityfocus.com
-- 
Yours, 
J.A. Terranson
sysadmin () mfn org

If Governments really want us to behave like civilized human beings, they
should give serious consideration towards setting a better example:
Ruling by force, rather than consensus; the unrestrained application of
unjust laws (which the victim-populations were never allowed input on in
the first place); the State policy of justice only for the rich and 
elected; the intentional abuse and occassionally destruction of entire
populations merely to distract an already apathetic and numb electorate...
This type of demogoguery must surely wipe out the fascist United States
as surely as it wiped out the fascist Union of Soviet Socialist Republics.

The views expressed here are mine, and NOT those of my employers,
associates, or others.  Besides, if it *were* the opinion of all of
those people, I doubt there would be a problem to bitch about in the
first place...
--------------------------------------------------------------------



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com