Serious answers: (much like your 'serious questions'):
> If I don't see SANS running around with their capes off, I don't
http://isc.sans.org/blackworm
Further, our reports lead to a SANS ISC temporary URL's for each AS.
The last time SANS felt something was so serious they needed all
of NANOG to dance, they came out and said so. That's their handlers
diary. I read it. A lot of people read it. It's well balanced and
usually on target. Just like that. It's not alarmist. It seems
fairly certain that as long as Symantec et. al. do their thing, we
will be able to watch the superbowl in peace.
I don't work for IL-CERT (which is actually the GOV cert, not IL-CERT),
except in an advisory capacity volunteer-base now. I.e., I am a civilian
now.
Congratulations.
> off our football, and get ready for "worms". I'd hope to see US-CERT
> continue making progress and telling North Americans when to worry.US-CERT is kept in the loop every step of the way, as is the FBI, Secret
Service and a lot of others who contribute from their time and effort.
We can all criticize others, it's easy. How about you start pulling your
own weight instead of causing havoc non-stop?
I'm glad to hear that, as many times as you state it. Thank you.
Trust isn't havoc. Your loose cannon response is an excellent
reason why we should be skeptical. My point was around trust and who
we should and shouldn't. There are a lot of characters out there doing
things that are helpful, but that doesn't mean we should trust them.
I don't think that North American Network operators should trust you
and my reason why is that I had at one point asked you to disclose how
you were collecting information you wanted me to rely on and you
refused. My dis-trust is not personal. There are now other reasons
that I'd prefer to not have to disclose here as it does nothing to
further the conversation.
As far as my contribution goes, I'm making it. I read, observe, discuss,
and comment. I'm sorry if you feel particularly targeted or flamed. It
is not intentional. What would you like me to do to make it better
for you? A good example of the interaction I describe is when you
were first posting the bot reports and there was discussion. They
changed and they were quite ok and I believe I commented to the same.
Perhaps my typing style is irritating? I apologize.
As far as general security goes, I do not trust DA, NSP-SEC, or
many others as the final authoritative source on anything. There
are some people I trust more than others, Thomas, Bellovin, Bush, etc., and
then there are the people I can't trust i.e. the IRC'ers, etc.
Is this some sort of VeriSign plot or did you come up with it all on
your own?
I think I'll watch "White Noise" on the DVD now.
Admins: Clearly, a personal attack and I'd like the AUP enforced
please.
-M<