[iwar] [fc:FBI.aims.to.squash.bugs]

From: Fred Cohen (fc@all.net)
Date: 2001-10-02 19:50:36


Return-Path: <sentto-279987-2621-1002077344-fc=all.net@returns.onelist.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 by localhost with POP3 (fetchmail-5.1.0) for fc@localhost (single-drop); Tue, 02 Oct 2001 19:51:14 -0700 (PDT)
Received: (qmail 27858 invoked by uid 510); 3 Oct 2001 02:50:43 -0000
Received: from n21.groups.yahoo.com (216.115.96.71) by 204.181.12.215 with SMTP; 3 Oct 2001 02:50:43 -0000
X-eGroups-Return: sentto-279987-2621-1002077344-fc=all.net@returns.onelist.com
Received: from [10.1.1.223] by n21.groups.yahoo.com with NNFMP; 03 Oct 2001 02:50:37 -0000
X-Sender: fc@big.all.net
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-7_4_1); 3 Oct 2001 02:49:04 -0000
Received: (qmail 93144 invoked from network); 3 Oct 2001 02:49:04 -0000
Received: from unknown (10.1.10.26) by 10.1.1.223 with QMQP; 3 Oct 2001 02:49:04 -0000
Received: from unknown (HELO big.all.net) (65.0.156.78) by mta1 with SMTP; 3 Oct 2001 02:50:37 -0000
Received: (from fc@localhost) by big.all.net (8.9.3/8.7.3) id TAA10163 for iwar@onelist.com; Tue, 2 Oct 2001 19:50:36 -0700
Message-Id: <200110030250.TAA10163@big.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL1]
From: Fred Cohen <fc@all.net>
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Tue, 2 Oct 2001 19:50:36 -0700 (PDT)
Reply-To: iwar@yahoogroups.com
Subject: [iwar] [fc:FBI.aims.to.squash.bugs]
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

FBI aims to squash bugs 
By D. Ian Hopper, The Associated Press, 10/2/2001
<a href="http://www.canoe.ca/CNEWSTechNews0110/01_fbi-ap.html">http://www.canoe.ca/CNEWSTechNews0110/01_fbi-ap.html>

WASHINGTON (AP) -- The FBI is teaming with the computer industry to
offer Americans a single fix to prevent the 20 worst threats that have
emerged on the Internet -- from the Code Red worm to the Melissa virus. 
All of the recent Internet attacks -- from Melissa to Code Red -- took
advantage of these well-known program vulnerabilities, and the
government hopes to get users and companies to patch them before the
next virus appears. 

The list, compiled with the help of over 50 computer security experts,
addresses software bugs in Unix and Microsoft Windows operating systems,
as well as many common mistakes.  These include using simple passwords
and not backing up critical data. 

Both the list and the fixes can be found on the non-profit Sans
Institute Web site.  The institute's research director, Alan Paller,
said the Top 20 scanner can be obtained for free by sending an e-mail to
the Center for Internet Security, using instructions found on the Sans
Institute Web site at www.sans.org. 

Paller said the fix will eventually be distributed on a CD-ROM as well. 
Security experts have long said that computer users should download new
software fixes -- known as patches -- regularly, but the practice is
frequently overlooked at large companies and universities. 

Many individual users are unaware of vulnerabilities in their computer,
and find installing software updates tedious and difficult. 

In July, the FBI and industry groups joined in a high-profile crusade to
tell computer users how to protect themselves from the Code Red worm. 
Their campaign helped to blunt the effects of that worm, which could
have slowed the entire Internet. 

The list, and the single fix, answers this problem.  The list will be
updated regularly as hackers find new holes. 


------------------------ Yahoo! Groups Sponsor ---------------------~-->
Get your FREE VeriSign guide to security solutions for your web site: encrypting transactions, securing intranets, and more!
http://us.click.yahoo.com/UnN2wB/m5_CAA/yigFAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2001-12-31 20:59:53 PST