There will always be errors in code, be it operating system or application. Slammer was successful becuase companies and users still insist on not following basic security tenets - where is the ingress/egress filtering on border routers, why is tcp/1433 and udp/1434 allowed through a firewall (if needed, why isnt it locked to specified source IP's), why isnt TCP/IP filtering or IPSec filtering used?

Whether or not to sue, that is another question. Personally preventing the same individuals from propagating and thinning the gene pool is a better option.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/141/18078#18078