Allowing "administrators" to crack comprimised systems to defend thier own will cause for more problems than it will ever solve. What stops me from cracking win2k servers and dropping nimba on it before I'm done, claiming that I was disabling an infected system that was attacking my network? The only proof is my word and the cracked/infected windows server. I think creative crackers would just use this as a way to cover up illegitimite activities rather than system administrators defending thier networks. Besides, it seems like its alot more work cracking a nimba infected server spamming your network than just blocking that server at your network's firewall/router.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/98/15932#15932