Witty Worm Kick-Start Methods Revealed

voixderaison writes "Security Focus reveals more details about the methods used to seed the Witty worm last year. You might want to read the analysis at CAIDA for background and refresher on this groundbreaking worm, which spread very rapidly through a small population of systems, and then waxed their hard drives. A flaw in its random number generator seems to have protected 10% of the internet from the Witty worm."

Comments

At least it had a sense of humor

[14erCleaner]

There's nothing worse than a witless worm.

Flawed worm

[Vertdang]

"A flaw in its random number generator seems to have protected 10% of the internet from the Witty worm."

So, the witty worm was not complete. Would that make this worm a half-wit?

Re:Waxed?

[nizo]

Most viruses and commercial products just clean your harddrive, but this one put a final coat of wax on too. If only some commercial disk cleaner could get that kind of a beautiful shiny finish added to its products....

Dang it!

[Mz6]

"A flaw in its random number generator seems to have protected 10% of the internet from the Witty worm."

I always do that! I always seem to miss some mundane detail!

How we laughed

[ThomS]

"...And then I said 'No I'm not, I'm a worm" Oh that witty worm.

CAIDA ??

[zappepcs]

OMG! If this analysis was done by *THE* Al CAIDA group, then you know it has to be right. err, I mean, those guys know lots about viruses and terrorism and worms and dirt floors and stuff...

Uhh

[buckymatters]

"The installation of patches is often difficult, involving a series of complex steps that must be applied in precise order." Was it download, install, reboot or install, reboot, download? I can't remember!