26 January 2003

26Jan2003

SQL Worm Irony

Microsoft's homepage, on the day the SQL Server worm crippled large sections of the Internet: "Today's News: Bill Gates reports on security progress made and the challenges ahead." (Image on site)

26Jan2003

Are Network Worms Healthy?

The solution isn't defensive worms. The solution lies in the recognition (seldom expressed, lest we later regret it ourselves), that the failure to patch a seven-month bug is negligence, the failure to firewall non-essential open ports on network servers is negligence. In other matters, the failure to implement egress filtering is negligence. We could probably come up with a pretty good baseline of what is obvious systems administration negligence when it comes to security.