Interesting Sober Worm makes Headlines

It is snowing. First 10cm+ dump close to the lake. Some interesting news on a the worm that has been dealing a load of traffic to some of my mail servers. Details on the recently cracked Sober worm reveal some techniques that allow it to upgrade and change itself by connecting to public access points using specifically crafted URLs for specific dates. In the future, when there are more of these ‘public posting boards’ it may be harder to ensure that they all refuse the worm access. At that point, it might even be possible to deploy a machine capable of deploying the upgrade from a public site, leaving no trace of the author, and possibly succeeding in the launch of a subsequent uncracked variant. … A DoS nightmare for the weakest link in Operating Systems.