A Red Lesson

38
Gotta love stuff like this for the weekend. A recent article on CNET has some statistics on the Code Red virus that was hitting the net the other week. As of the 19th of this month over 350,000 servers had been infected. The exploit proved a point many security experts have been trying in vain to get people to understand. A single virus if done correctly can bring the entire net down to a crawl.

In the end, a design flaw in the worm's programming stymied the attack, but the potential threat of hundreds of thousands of servers flooding the wires with garbage data has resurrected concerns about security among those who consider themselves the guardians of the Internet. The Internet was lucky this time, as this particular Code Red program squandered its advantage and left itself vulnerable to security measures. That will not always be the case, said Vern Paxson, staff computer scientist at the Lawrence Berkeley National Laboratory, who analyzed Code Red's quick spread.

The internet is not invincible, and the larger, more complex, and more diversified it gets the more vulnerable it becomes to just a single clever guy working in his basement able to halt the entire thing. Did anyone take a look at those net weather reports while that virus was spreading? It was just a side effect of the virus that so many routers were junking out and lines getting flooded. Imagine what happens when someone actually puts the time into releasing a "net stopper" virus.

Steve Gibson is the cofounder of Shacknews.com. Originally known as sCary's Quakeholio back in 1996, Steve is now President of Gearbox Publishing after selling Shacknews to GameFly in 2009.

From The Chatty
Hello, Meet Lola