Code Red III

drcrja was the first to send us this brief bit about Code Red III which is apparently faster and more vicious than its entertaining predecessors. I'm still wondering what I should do with the hundreds of IPs in my desktop's apache log trying hopelessly to overflow my buffer.

Comments

Python has no buffer overflow problems.

[Russ Nelson]

Python has no buffer overflow problems. Neither does Perl. Okay, so .... what does that tell you? Is this something that has "always been a problem in people's code."? Or is it something in the C library that encourages buffer overflows?
-russ

Re:make some money off banner ads

[ekrout]

Please let me know when you decide whether I'm a "cockbiter" or a "pillowbiter".

And by the way, Coward, I'm a junior computer science & engineering major at a well-respected private university where I am the chairman of the Association for Computing Machinery (ACM). I also have a high IQ and don't hesitate to arrogantly and effectively deal with scum like yourself.

Have a nice day :-D

Better Names

[zpengo]

Code Red I, II, and III are pretty dull names. Why not call II and III something like Code Blue or Code Monkey or something.

Re:Please

[truthsearch]

If Microsoft can't even patch their own servers then how can anyone expect others to do it properly? The best solution (in the long run), is to switch to a server which has less vulnerabilities.

Microsoft should be sued

[Rosco P. Coltrane]

Why do poor bastards get sued for using a little bandwidth to participate in an interesting project while Microsoft gets away with releasing shoddy products that slow down the entire Internet ?

I know gun manufacturers shouldn't be sued when someone commits a crime with a firearm, and in that case the people who created the lame Code Red virii should be sued primarily, but I still think Microsoft is guilty here because their customers weren't aware their Windows-running boxes could start chewing up bandwidth like crazy simply because the OS vendor doesn't give a damn about these things.

To my knowledge, Microsoft didn't even try to mass-mail the patch to their registered customers who might be affected. Therefore, at the very least, I reckon they should be ordered to pay damages to telcos and ISPs for lack of due diligence.

(of course, in Georgia, I'd also be happy to see the state sue them for 59c per second of wasted bandwidth as well :-)

come on III, kick II's ass

[dermotfitz]

I think this is really fun. Of course I am not an ISP or anything. Anyway, I am looking forward to a nice DDOS of whitehouse.gov this time around. That'd be fun wouldn't it? This is some nice distributed computing :) Has there ever been a virus so widespread as Code Red X ? Is this going to be the future of virus writing? Imagine something similar being written for routers? By the way, is it possible to write a virus that can't be decoded by the spoilers over at Eeye and all you old programmers out there? Would it be possible for someone to put one together that noone know what it was going to do until it did it?