Hello:
On 12/8/10 10:43 AM, JC Dill wrote:
On 08/12/10 4:28 AM, Arturo Servin wrote:
One big problem (IMHO) of DDoS is that sources (the host of
botnets) may be completely unaware that they are part of a DDoS. I do
not mean the bot machine, I mean the ISP connecting those.
ISPs are not the source. The source is Microsoft. The source is
their buggy OS that is easily compromised to enable the computers to
be taken over as part of the botnet.
Many third party vendors like Adobe, Sun and others are just as culpable
in this sense, if not more. A large majority of the vulnerabilities
leveraged to deploy modern malware / botnets come from these client-side
applications (e.g. flash, reader, java, etc) and not the OS
specifically. It's beyond the point that we can blame just Microsoft.
Yes, they can get better, but they've actually made great strides in
software security in the last few years. Now that the other vendors are
starting to feel the pain, hopefully they'll start to follow suit.
Aaron
