April 10

"stealing" chap2 : the worm turns

vocabulary

• malware
• virus
• worm
• rootkit
• trojan horse
• AV company - anti virus
• nimda worm - 2001
• 'snort signature' - see wikipedia: snort
• honeypot - see wikipedia: honeypot (computing)
• home DSL network
• 404 page - an HTTP response code
• HEAD request - an HTTP message like GET or POST
• sequential scan
• IIS - microsoft web server
• ethereal - what wireshark used to be called
• vmware - one of the platform emulators
• NOP sled
• little endian
• 0-day
• DDoS

resources

• disassemblers
  • IDA (IDA Pro is still a thing; costs about $2k per mac/win/linux per person)
  • my 2018 systems course : x86 gdb
  • cmu bomb lab
• US CERT - CISA security alerts & updates
• kaspersky - threats
• wikipedia: timeline of computer viruses and worms
• wikipedia: comparison of web servers
  • popularity of web servers

recipes website

Everyone now has a github invite to the recipes team. No one has yet committed a change to the repo.

I've added a TODO file. We should turn some of those into "issues" ... and learn that workflow.

Let's discuss this and where it's going.

aside

• the javascript black hole: A playbook for ethical engineering on the web | HN discussion
• why you should stop using google analytics | hn discussion