RE: Authorities eye MSBlaster suspect

["Schmehl, Paul L" <pauls () utdallas edu>]

> -----Original Message-----
> From: morning_wood [mailto:se_cur_ity () hotmail com] 
> Sent: Friday, August 29, 2003 11:19 AM
> To: Charles Ballowe; full-disclosure () lists netsys com
> Subject: Re: [Full-disclosure] Authorities eye MSBlaster suspect
>
>
> if the worm was active in anticipation of a patch that 
> intoduced a new exploit vector and it took advantage of that, 
> is'nt the vendor ( microsoft ) to blame then? As well there 
> was plenty of advanced warning on this exploit long before 
> msblast was an issue. It seems to me that it is each admins 
> responsiblity, if they were affected ( infected ) not the 
> coder. if this were the case the LastStage(of)Delerium would 
> be the blamed party for developing and releasing the exploit, 
> but alas.. they are not of USA orgin. SUE LITIGATE BLAME PROCECUTE
So you would blame murder victims for being in the wrong place?  Or rape
victims for wearing the wrong clothing?

Nice set of ethics there.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/ 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html