Alan Paller
Alan Paller
figured infected looking people second seeing wave
There is a wave of people looking for infected machines. We are getting into the second wave of infections. We haven't figured what they are doing. But we are seeing a very big wave of scanning.
systems terrible widespread
It would have been terrible (without the widespread patching). That got a lot of systems fixed.
denial fighting hard people savvy service time
This illustrates that even technologically savvy people have a hard time fighting off denial of service attacks.
computers control course pay tapping
Of course it's the government. Governments will pay anything for control of other governments' computers. All governments will pay anything. It's so much better than tapping a phone.
mapping protect situation systems
It is a situation where MCSEs had no idea that there is a fundamental vulnerability in IIS and ISAPI mapping and so had no way to protect their systems other than after-the-fact patching,
automated bottom government line nearly operating past popular protected security six systems targeted targeting
The bottom line is that security has been set back nearly six years in the past 18 months. Six years ago, attackers targeted operating systems and the operating system vendors didn't do automated patching. In the intervening years, automated patching protected everyone from government to grandma. Now the attackers are targeting popular applications, and the vendors of those applications do not do automated patching.