[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-Disclosure] recent RPC/DCOM worm thought



On Wed, 13 Aug 2003 14:20:22 CDT, Kerry Steele <ksteele@securitypenetration.com>  said:

> If Microsoft were as evil an empire as they are perceived to be, then
> wouldn't they already have the backdoor to your system to apply the
> patch anyway?  If so then why go throught the pain in the ass to write a
> shotty worm and draw bad publicity to the company?

If their backdoor worked as well as their front door,  the backdoor patch
would fail, and then they'd have to face the derision of:

1) The original bug
2) Having put in a backdoor
3) Getting it wrong.

If they release a worm to do it, they only have to suffer (1).

PGP signature