Zobot Authors Caught

Throw away the Key on these Clowns

Published on August 29, 2005 By Dr Guy In Personal Computing

Zobot was one of the fastest exploits of a microsoft hole yet created. IN less than a week's time, these infantile idiots, Farid Essebar of Morocco, and Atilla Ekici of Turkey released what essential was an aggravation (the worm did not destroy data, just crashed servers). I am glad these juvenile deliquents were grabbed so fast as these clowns must be stopped before someone tries to outdo them in the future and release a deadly worm just as fast.

But I have to wonder about the so called Experts as well:

But experts said the damage probably wouldn't be substantial because most companies made the necessary software fixes quickly.

I dont know about these experts, but in our organization, with over 100 servers that need patches, even if we jumped right on them when a patch is released, it would still take 4 days to complete the patching. And we dont like to do that.

We have been burned in the past with bad patches from Microsoft breaking the system or other appications, so we like to test the patch for at least 2 weeks on Test boxes and redundant boxes to make sure we do not detect any ill effects. We did not have that luxury this time because of the release of the worm, but it still took us a week and 1/2 to get all the boxes patched. And we crossed our fingers the whole time hoping and praying that we were not doing more harm than good.

Dont get me wrong, we do have firewalls, and very few of our systems are even exposed to the internet (in a DMZ). But in an organization of 11k users, there are a lot of laptops, and they can be used to circumvent those firewalls. It has already happened once (but we were patched for that worm, just the user was not).

It is unrelealistic to think that patching can be done over night and the bug makers know this. I wish I had more confidence in Microsoft and its patches, but I have been burned too many times in the past by a patch (only to have it re-released in 2-4 weeks).

These juvenile deliquents should be made to pay with both complete revocation of any computer use, and a fine so onerous that they never see themeslves debt free. FOr only making it a harsh and painful penalty will the other miscreants out there think twice before getting their jollies.

Comments (Page 2)

Dr Guy

on Aug 30, 2005

Not harsh enough....the removal of body parts essential to key tapping and button pushing....a lobotomy to prevent virus instuction.

Ah, the Sharia version of the penalty! IN this case, it might be appropriate.

starkers

on Aug 30, 2005

Ah, the Sharia version of the penalty! IN this case, it might be appropriate.

Along with a multitude of Oriental tortures that go well beyond a dripping tap/faucet on the forehead. I read somwhere that electricity and water do not mix well, but a former spycracker wrote in his memoirs that they combine excellently to persuade alternative thinking in individuals. Crank up the generators!

Dr Guy

on Aug 30, 2005

Crank up the generators!

As someone who took electronics in school - OUCH!

Zoomba

on Aug 30, 2005

The ULTIMATE Punishment for these jerks...

Make them sit on the AOL help desk phone line and forward ALL virus related calls to them. Nothing beats a few years of walking people, who are so technologically primitive that microwave ovens make them nervous, through the process of recovering from a virus. They must remain on the call until the problem is fixed too.

OhGimmeABreakWhatIsThisFor

on Aug 30, 2005

Attacking the daily lives of billions of people, and causing companies to spend billions in time and labor to protect themselves is enough for at least life in prison

As penalties go, whatever the penalty for the theft of those amounts would be, this penalty should be no less severe.

It's theft of the worst kind, because at least with regular theft, there is a motive (to increase one's own wealth). With this form of theft, however, the goal is only to prevent the victim of obtaining, retaining, or enjoying the rewards due to him or her for labor honestly performed.

However, to me, the goal is to isolate the culprit from society, to prevent him from victimizing others. Besides getting your mug shot on the Front Page, the primary dissuader for criminal activity (for me) is the type of people you must hang with while serving your sentence: you locked in a large room filled to overflowing with low-lifes twice as despicable yourself -- or worse! -- and are required to live in close proximity with these nutcakes and dunces.

The Cliff-Walking Fool.

Dr Guy

on Aug 30, 2005

Make them sit on the AOL help desk phone line and forward ALL virus related calls to them. Nothing beats a few years of walking people, who are so technologically primitive that microwave ovens make them nervous, through the process of recovering from a virus. They must remain on the call until the problem is fixed too.

You are positively evil!

Dr Guy

on Aug 30, 2005

you locked in a large room filled to overflowing with low-lifes twice as despicable yourself -- or worse! -- and are required to live in close proximity with these nutcakes and dunces.

The Cliff-Walking Fool.

I think that is where they do spend their lives anyway.

starkers

on Aug 31, 2005

Me thinks making them victims of their own dirty work is an apt punishment.

Confine them alone in an immobilised state to an environment which is solely computerised....then introduce their virus to disrupt food, water and air supplies so there is either not enough or an excess. In either event, an inadequacy or an over abundance would be mightily uncomfortable.....whilst gasping for breath due to insufficient air, the force feeding tube is overflowing into the nostrils. Now that'd make 'em think twice!

Dr Guy

on Aug 31, 2005

then introduce their virus to disrupt food, water and air supplies so there is either not enough or an excess. In either event, an inadequacy or an over abundance would be mightily uncomfortable.....

They would probably do that to themselves anyway. They are not too swift in the common sense department.

starkers

on Aug 31, 2005

They would probably do that to themselves anyway. They are not too swift in the common sense department.

Yeah.....but not strapped into THE chair, which the poor confused computer may or may not turn 'hot' at any moment, and various despatch and delivery tubes not sure if they're coming or going

Yeah.....I'm a bit of a worry and watch too many weird TV shows

Dr Guy

on Aug 31, 2005

Yeah.....I'm a bit of a worry and watch too many weird TV shows

Looks like they are paying off too!

NightTrainthedark

on Aug 31, 2005

Years back, before I ever had a computer, I knew a guy (group)that supposedly was paid by an AV software maker to create viruses. Not for the company but to spread panic and increase sales. This group all worked for Digital at the time. They spent their after hours doing some pretty evil shit. I didn't know any better at the time. I was in my early twenties. Girls , cars, and girls was all I cared about. I don't trust any AV software maker. Never will.

Dr Guy

on Aug 31, 2005

I don't trust any AV software maker. Never will.

Back in 91, we got hit by Dark Avenger. Norton not only gave us the AV software to clean the bug (on the promise we would cut a PO), but worked with us to help clean it. I dont know which company was making bugs, and I will not argue it. But Norton has saved our butt in the past, and I will stand by them now.

starkers

on Aug 31, 2005

Years back, before I ever had a computer, I knew a guy (group)that supposedly was paid by an AV software maker to create viruses. Not for the company but to spread panic and increase sales

I guess alot of people suspect AV companies of still doing this, and I'm in no position to argue otherwise, but I think, for the large part, virus writers are computer literate animals who do so purely for the pleasure of it, simply because they can. Of course sales will continue to rise in such a climate, but I feel most virus writers do so to see their dirty deeds attracting worldwide attention.

Of course users need to be kept abreast of circulating parasites in order to protect themselves, but if this could somehow be done behind the scenes, without the headlines, I wonder how many of these low-life's would bother.....no fame no gain, so to speak, and eventually the peer group to which they belong would disappear

Looks like they are paying off too!

If the truth be known, I've lent poetic license to an over active and furtive imagination here, but it was more tongue in cheek than sincere thought. Justice is one thing, and one should pay for their crimes, but the punishment for wrong doing should never be barbaric or at the expense of our humanity.

Dr Guy

on Sep 01, 2005

Justice is one thing, and one should pay for their crimes, but the punishment for wrong doing should never be barbaric or at the expense of our humanity.

No, and after the heat of the moment dies down, it wil not be. HOwever, when you are cleaning several 10s of terabytes and several thousand computers, your patience wears very thin and it is lucky that the culprits are not within arms reach.

Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:

Richer content, access to many features that are disabled for guests like commenting on the forums.
Access to a great community, with a massive database of many, many areas of interest.
Access to contests & subscription offers like exclusive emails.
It's simple, and FREE!