Hmm. Access is an application which uses the underlying MSJET engine. Anything that can create an ADO object (or OLEDB or DAO...) can use that engine without Access running. The engine also handles reference counts so that if more than one program is using it, it won't load multiple copies and it won't unload until the last one closes it.
Besides, this article completely ignores the 'Sorry Andy, I'm just doing my job' quote in the virus code. What 'job' is this person talking about?
It's useless to speculate about that until we know more. (Not that speculation isn't fun!) There is also speculation that the attack on SCO is a red herring to distract. If so, the "Sorry Andy" line might be more of the same. (Why not send Andy an email, call, say it with flowers or leave a post-it?)
If I ever turned to Evil, I'd toss in bunches of misdirection like "Rosebud", "John 14:25", "Swordfish", "Darl, I'll get the final version to you Monday".;^)
As was said in the holy book The Mad Scientists' Club, "Don't be a sucker for a scarecrow!".
In your Introduction link, do you normally read Slashdot with nested rather than threaded? Or was that to highlight the quickly posted funny threads and push later more sensible threads a couple pages back? (If so, why not read at -1 to include any Fish Posts?)
A lot of the birds may not live in built-up areas, but a hell of a lot migrate through cities. (Hey, they've been flying that same route for a long time. "Where'd that building.. *THUD*")
Large tall glass buildings are particularly bad because they're (1) large, (2) tall, (3) glass, and definitely (4) illuminated at night. This site talks about the problem and programs (like FLAP) to turn off lights at night, especially during migration and rescue the not-dead-yet injured birds.
Keep in mind that while some jobs are being outsourced to India, it serves companies even better to amplify the FUD about it. They don't have to actually do it, and their wage-slaves are bullied into terror, submission and lower wages -- especially the new-hires.
Magazines always have their hobby-horses. Remember all the flying cars in Popular Science? The monster flying wing planes? Electro-jet hover platforms a la Dick Tracy?
Stuff like that never really happens the way they say. What? The sig? No, the triphibian car only flies "over water".
Besides, I thought that Wired jumped the shark in the first year.
How about a constructor bot, a pile of Lego Mindstorms modules, and a whole heap of bricks? I don't see why that wouldn't work, I used to build space probes out of Lego all the time!:)
Mind you, we'd better make sure that there's no life on Mars before dumping a Lego ant farm on it.
Having been steadily bombarded with e-mail come-ons for "Vi@gra," breast enlargements and the secret to "ALL NIGHT sex," an average recipient would no doubt like to tell a spam king to back off.
So when Scott Richter's phone number landed on my desk, I called. And, lo, he answered. I asked him if he'd mind my printing his number in the newspaper.
His colorful response suggested that he wouldn't like it. On the other hand, millions of us don't particularly like being spammed. To print or not to print his number. That is the conundrum. [snip!]
(And, yes, he did print the business phnoe number.)
Keep in mind that Darl might not want to pump the stock in this quarter. SCO sold a bunch of stock to RBC and friends at a higher fixed price such that if the price drops, SCO can make money on paper. A few SCO stories ago, someone pointed out that Darl's next chunk of stock options depend on SCO showing a paper profit--no matter how screwed up the accounting is to make that happen.
Darl doesn't care what happens to SCO so long as he can jump off a foot before it hits the ground.
For those wondering what hematite looks like, you can drift over to your
local New Age shoppe to take a look at the hematite
jewelry as well as find out its alleged properties.
Hematite is a good stone for those born during the Moon of Renewal - (22
Dec- 19 Jan.) Its grounding and soothing energies can help you relax and
unwind both physically and mentally. Hematite's renewing qualities also
make this stone an excellent match for those born during this time of the
year, but everyone can benefit from this stone.
Hematite is a good choice for those born under the zodiac sign of Virgo.
Opportunity's landing and "birth" on Mars are a bit late for Jan 19th, but
close enough. Renewing properties might help the flash memory and
batteries, and if there's one thing a Mars rover can always use, it's
grounding!
(Be warned: Valentine's Day is coming up, and you can never go wrong with
cutesy jewelery, but remember that some hematite is magnetic.)
It can also create some internal friction when "old-timers" in the company are suddenly paper BIG_NUM-ares as the value of their stocks and vested options jump sky-high as the company goes public. (I'm sure it wasn't pretty at dot.bombs as the reverse happened!)
There's also more distraction when large numbers of employee-shareholders keep a stock-quote web page tucked behind the work they're supposed to be doing.
Perhaps the seven responses to the original story should have been a tipoff that raising visibility of the project would have been a good idea. (Of course, that would have risked coming on too strong.)
It's been a story on Slashdot (2002) at least once. And I remember it being mentioned in a thread in another story last year--mind you, that's only because Crispin's name jumped out at me. (Like the time Tanya Huff did something nasty to him in one of her books.;)
I guess they couldn't decide how to spell Cris Cowan/Cowen's last name so they alternated.
They should have a volunteer review process to catch spelling mistakes...
Re:DDoS attack time table + analysis of DoS in Myd
on
SCO Offline
·
· Score: 1
Damn! Links to precisely the hard facts and level-headed analysis I was looking for. (No wonder you posted as an Anonymous Coward!:^)
Please read the links and mod parent up.
Re:Slashdotted Reuters?
on
SCO Offline
·
· Score: 1
While Steve Gibson is usually correct when reporting technical details, his conclusions sometimes come from tin-foil-hat-land. This is one of them.
In any event, this worm attack has absolutely nothing to do with XP and a DRDoS attack. It's just a plain old worm/virus infecting a whole lot of machines and having them all make lots of TCP/IP port 80 requests of "GET / HTTP/1.1\r\nHost: www.sco.com\r\n\r\n" This could have been done on any platform that allows viruses to spread. (Note that MyDoom affects pre-XP versions of Windows.)
A helpful Anonymous Coward provided links to these informativedocuments on the worm.
Re:Slashdotted Reuters?
on
SCO Offline
·
· Score: 1
So far as I've heard, this has absolutely nothing to do with raw sockets or DRDoS. It just does a simple TCP/IP port 80 request for the webpage--many many times. Please don't add to the FUD.
Apparently the DDoS happened, sco.com is down, and Darl didn't just trip over the cord. Interesting that the effort to make it DDoS in captivity failed. Perhaps it was just shy?
So. Maybe the DDoS is the primary purpose of this? MyDoom.B is ready to hit microsoft.com on Tuesday.
Slashdot Mirror
Well, that would make my installation much easier if I just use it as the default db... (he said as he slides further into Microsoft's trap...)
Hmm. Access is an application which uses the underlying MSJET engine. Anything that can create an ADO object (or OLEDB or DAO...) can use that engine without Access running. The engine also handles reference counts so that if more than one program is using it, it won't load multiple copies and it won't unload until the last one closes it.
It's useless to speculate about that until we know more. (Not that speculation isn't fun!) There is also speculation that the attack on SCO is a red herring to distract. If so, the "Sorry Andy" line might be more of the same. (Why not send Andy an email, call, say it with flowers or leave a post-it?)
If I ever turned to Evil, I'd toss in bunches of misdirection like "Rosebud", "John 14:25", "Swordfish", "Darl, I'll get the final version to you Monday". ;^)
As was said in the holy book The Mad Scientists' Club, "Don't be a sucker for a scarecrow!".
In your Introduction link, do you normally read Slashdot with nested rather than threaded? Or was that to highlight the quickly posted funny threads and push later more sensible threads a couple pages back? (If so, why not read at -1 to include any Fish Posts?)
Large tall glass buildings are particularly bad because they're (1) large, (2) tall, (3) glass, and definitely (4) illuminated at night. This site talks about the problem and programs (like FLAP) to turn off lights at night, especially during migration and rescue the not-dead-yet injured birds.
Keep in mind that while some jobs are being outsourced to India, it serves companies even better to amplify the FUD about it. They don't have to actually do it, and their wage-slaves are bullied into terror, submission and lower wages -- especially the new-hires.
Stuff like that never really happens the way they say. What? The sig? No, the triphibian car only flies "over water".
Besides, I thought that Wired jumped the shark in the first year.
Mind you, we'd better make sure that there's no life on Mars before dumping a Lego ant farm on it.
Now that would be abuse. One person, one "I do not want to be spammed" phone call ought to do the trick.
D'oh! It probably works better with the link (I will use preview, I will use preview...)
Darl doesn't care what happens to SCO so long as he can jump off a foot before it hits the ground.
I think I'll wait for the sequel IBM Goes Medieval on SCO's Ass.
And rarely carved or polished with wiccan/pagan decorations. While Hematite isn't magnetic, some of the stuff they sell as Hematite will be. :^)
(Be warned: Valentine's Day is coming up, and you can never go wrong with cutesy jewelery, but remember that some hematite is magnetic.)
There's also more distraction when large numbers of employee-shareholders keep a stock-quote web page tucked behind the work they're supposed to be doing.
I guess they were all out of scissors in Siberia.
Perhaps the seven responses to the original story should have been a tipoff that raising visibility of the project would have been a good idea. (Of course, that would have risked coming on too strong.)
It's been a story on Slashdot (2002) at least once. And I remember it being mentioned in a thread in another story last year--mind you, that's only because Crispin's name jumped out at me. (Like the time Tanya Huff did something nasty to him in one of her books. ;)
They should have a volunteer review process to catch spelling mistakes...
Please read the links and mod parent up.
In any event, this worm attack has absolutely nothing to do with XP and a DRDoS attack. It's just a plain old worm/virus infecting a whole lot of machines and having them all make lots of TCP/IP port 80 requests of "GET / HTTP/1.1\r\nHost: www.sco.com\r\n\r\n" This could have been done on any platform that allows viruses to spread. (Note that MyDoom affects pre-XP versions of Windows.)
A helpful Anonymous Coward provided links to these informative documents on the worm.
So far as I've heard, this has absolutely nothing to do with raw sockets or DRDoS. It just does a simple TCP/IP port 80 request for the webpage--many many times. Please don't add to the FUD.
And the comments overheard in a bar at 2am are obviously the voice of all human wisdom and may be quoted as such.
So. Maybe the DDoS is the primary purpose of this? MyDoom.B is ready to hit microsoft.com on Tuesday.