Good points Stefan, The (stupid) user who opens any *.exe, *.vbs, *.js ... is the problem. Unfortunatly the "educated" user sometime does not think either. I work tech support for a US Gov agency and one of the first infections at our site was another tech supporter who got an email from a contractor buddy of his and launched the attach.

We could blame the OS, true Unix would be safe from this attack but how much end user software can run on it, how long would it take for a dedicated bug writer to find the hole in the security web. We could blame the A/V venders for forseeing the chance of a VBS worm (not a virus). We could blame the user for launching it. Or we could prosocute the little Neeks who write malicious code, for whatever reason they have. We do not arrest the victem of the crime do we? We do not arrest the manufature of the weapon? We arrest the low life scum who uses the weapon against society.

Ok, I'm off my soapbox.

Bilbo B.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/32/1831#1831