>"Graham Phillips reports on a new weapon in the computer hacker's arsenal
>- so powerful it could bring down the entire Internet. They're called
>Worms and both computers hackers and IT experts agree Worms are so
>virulent they could can infect the entire internet within 20 minutes of
>release, leaving no time for antivirus companies or people to react. The
>result of Internet meltdown would be disastrous - supermarket shelves
>could empty, ATM cards may stop working and even manufacturing could come
>to a standstill as a result"
That's funny!
20 minutes to infect the entire Internet. Then people start to turn things
OFF. Pull Plug OUT. (Well most, there were plenty of people with MS
Servers in Australia who had no clue 48 hours after Nimda and left their
machines sprouting crap.)
I can hardly see a supermarket emptying of product in 20 minutes and I fail
to see how ATM cards could possibly stop working. The Internet isn't
related in any way to the protocols used by ATM's, even if ATM's used IP
for transport and tunneled encrypted data, it still wouldn't have that
great an effect because the tiny weeny packets of ATM traffic would still
get through the big rush hour worm crush (providing ATM's weren't using
UDP!) Simply set priority levels for different traffic and voila - problem
solved.
Any border router that doesn't have the ability to traffic flow different
ports and different IP's is a potential disaster waiting to happen. Even I
now limit the amount of say port 80 traffic coming into my border, even on
an IP basis because some servers can take higher hit rates.
Give Telnet/ssh the highest priority from KNOWN address space so that you
can always telnet it and you're pretty safe.
Works can only occupy the space that is MADE available to them, if you
limit their patch of dirt, they can't grow any bigger.
This archive was generated by hypermail 2.1.1 : Sun Mar 31 2002 - 03:10:03 EST