RE: The Worm at RTP

From: Schulz, Dave (DSchulz@dpsciences.com)
Date: Fri Jun 16 2006 - 14:31:14 ART


Sounds like that should be the security lab. Shhhhh...don't want to
give them any ideas. ;-)

Dave Schulz,
Email: dschulz@dpsciences.com

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Mark Lasarko
Sent: Friday, June 16, 2006 12:56 PM
To: ciscocciein2006@gmail.com; darbyweaver@yahoo.com
Cc: ccielab@groupstudy.com; Upp_and_Upp@hotmail.com; oletu@inbox.lv
Subject: Re: The Worm at RTP

Sounds interesting to me - more fun and less evil!
I think that would be a *great* way to start your morning.
Defeat the worm to start your lab - LOL :)
I may be ill, but it sounds like fun to me!
~M

>>> Darby Weaver <darbyweaver@yahoo.com> 06/16/06 12:20 PM >>>

I'm pretty sure that it was totally unexpected.

Also, let me reiterate the tests appear to be very
fair.

I would not think the Security exam would be
otherwise.

--- CCIEin2006 <ciscocciein2006@gmail.com> wrote:

> Are you sure that wasn't purposely planted there for
> the Security lab folks
> :-)
>
> On 6/16/06, Darby Weaver <darbyweaver@yahoo.com>
> wrote:
> >
> > Just looked like a typical buffer overflow...
> >
> > The lsass.exe message and your machine will shut
> down
> > in 60 seconds followed by the countdown.
> >
> > It did mess up my concentration especially since
> we
> > were told that the PCs were locked down pretty
> tighly.
> >
> > I did not evaluate it further to tell you exaclty
> > which variant it was. I was there to take the
> lab,
> > after all...
> >
> > Although, I do consider myself fairly
> knowledgeable on
> > worms in general.
> >
> > I was going to be majorly concerned if I had
> suffered
> > a second reboot.
> >
> >
>



This archive was generated by hypermail 2.1.4 : Sat Jul 01 2006 - 07:57:33 ART