RE: Code Red growth stats

From: Steven M. Bellovin []
Sent: Wednesday, August 01, 2001 8:16 PM

>Are you taking into account that every copy of Win2K comes
with IIS? I had
>to quickly run around and do upgrades yesterday. I clean
forgot about the
>workstations. I bet that I'm not the only one either.
Are you sure about that? Or rather, are you sure it's on by

No, it's not on by default. But, no one that I know (including my duaghter's
warez friends) whom is running Win2K at home, isn't running a web server.
Even when they're not supposed to (behind cable modems).

In the shop, we all run IIS, on the workstations, for local testing and
development. But, what do you expect from a shop full of development geeks?

I just checked my toy desktop machine and rebooted to the other
partition of my laptop, and didn't see it running on either.l To be
sure, I'd have turned it off if I knew it was on, but I have no idea
how to do things like that on Windows...

It is altogether too easy. Goto: Control Panel >> Administrative Tools >>
Internet services manager.

So, intentional or otherwise, Code Red has brought us:

- Increased revenue for transit providers -- some of which aren't
  doing too well financially -- with burstable billing customers.

- A proving ground in which certain weak core/edge routing devices and
  provider infrastructures were tested for resiliency.

- Natural selection (quoting Mr. T, "I pity the fool")

Remind me again what all the fuss is about...