Re: [Full-Disclosure] Authorities eye MSBlaster suspect

["morning_wood" <se_cur_ity@hotmail.com>]

my stance is that as a entity on the internet, it is the responsibility
of the person or orginization that connects to a hostile
enviroment to ensure themselves a reasonable ammount
of protection.

my "murder" analogy, applies to the ATTITUDE of said person/orginazation
and the general internet public. Im not blaming a person for being
attacked in the real world.

how can i set the frame here.. ok,
i was not affected by the msblast worm because of measures i have in place,
and have had before and during the attack of this vunerability.
but if i had NOT been, the responsibility would lie solely with ME in my failure
to protect myself ( and my network ) in that hostile environment, thus if i
blame some other party
( LSD, micro$sotf, or msblaster coder ) i am shifting the blame away by way of
the
"poor me" scenario.

i apologize for not being clear in the first place and i can
 see how it could be looked at differently. Personally I have
never been the one of "they deserved it" when it comes to a crime against
humans with your examples stated. ( rape victim dress or protection from a
bullet )

thank you,

Donnie Werner


----- Original Message -----
From: "Schmehl, Paul L" <pauls@utdallas.edu>
To: <full-disclosure@lists.netsys.com>
Sent: Friday, August 29, 2003 1:12 PM
Subject: RE: [Full-Disclosure] Authorities eye MSBlaster suspect


> > -----Original Message-----
> > From: morning_wood [mailto:se_cur_ity@hotmail.com]
> > Sent: Friday, August 29, 2003 3:04 PM
> > To: Schmehl, Paul L; full-disclosure@lists.netsys.com
> > Subject: Re: [Full-Disclosure] Authorities eye MSBlaster suspect
> >
> > > So you would blame murder victims for being in the wrong place?  Or
> > > rape victims for wearing the wrong clothing?
> > >
> > > Nice set of ethics there.
> >
> > NO !!!
> > i think you mixed the top portion of my post with the "poor me"
> > examples on the bottom, i blame the person that commits the
> > act gimme a break, and quit trying to miscontrue things Paul
> >
> What did I misconstrue?  You stated that you believed that admins were
> at fault for worm infections.  I quote, "It seems to me that it is each
> admins responsiblity, if they were affected ( infected ) not the coder."
>
> What about your statement quoted here did I misconstrue?  Admins are
> affected by worms the same way that a crime victim is affected by the
> crime committed against them.  Some argue they were in the wrong place
> or they were dressed wrong or they should have known better than to be
> where the criminal was.  Your argument is essentially the same, is it
> not?
>
> Paul Schmehl (pauls@utdallas.edu)
> Adjunct Information Security Officer
> The University of Texas at Dallas
> AVIEN Founding Member
> http://www.utdallas.edu/~pauls/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html