Re: Malicious use of grc.com

[fredl () dutchie org]

Well, ofcourse the logs of his webserver are very easily correlated with
any portscans leading up to an attack, so using this service in order to
avoid being caught with your pants down might not be such a great idea.
Perhaps Gibson is working for the FBI ? :-)


"Jay D. Dyson" wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
>
> On Tue, 27 Nov 2001, Brad wrote:
>
> > I'd suggest that if people are going to portscan, they'll use one of the
> > thousands(?)  of available tools to do this, rather than go to the
> > trouble of playing with code to do the same through Gibson's site.
>
>         I disagree.  Were my intentions malevolent, the last thing I'd do
> is launch an initial scan from my primary, secondary (or even tertiary)
> systems.  When someone puts up a scanning service with weak or nonexistent
> validation on who can use that service against what IP address, that sort
> of thing is an invitation for net.abuse.
>
>         In my view, Gibson is irresponsible in setting up such a weak
> system on his site.  I imagine others would be more forgiving had he not
> gone off on a "Microsoft/DDoS" bender earlier this year.
>
> - -Jay
>
>    (    (                                                        _______
>    ))   ))   .-"There's always time for a good cup of coffee"-.   >====<--.
>  C|~~|C|~~| (>----- Jay D. Dyson -- jdyson () treachery net -----<) |    = |-'
>   `--' `--'  `---------- Si vis pacem, para bellum. ----------'  `------'
>
> -----BEGIN PGP SIGNATURE-----
> Version: 2.6.2
> Comment: See http://www.treachery.net/~jdyson/ for current keys.
>
> iQCVAwUBPALg87lDRyqRQ2a9AQEfEwP+MOKk1y1BrzOvx+qt9gKWquT05qXFs7Bb
> wu+L/avvA4RIeWX+jzQpmj4Jq9ob5slT1CGftw50OOxNJfTgv0eO7UTlRv6lpyd7
> vaweUejdqwEd+NlMTYReflPZe6yoW94xp9Lp2LwZEugWjas2/4mJvHlslC3wTGoc
> vpXD/Uk22sk=
> =oDh2
> -----END PGP SIGNATURE-----