<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
I think it more likely that most bad guys will stay in the shadows
until most people have stopped paying attention (which will probably be
a few weeks after Black Hat). There will still be a significant number
of sites that will not have patched, so there will be plenty of
exploitable servers, but none of the extra vigilance there is now.<br>
<br>
FWIW,<br>
<br>
Doug<br>
<br>
Tycho Eggen wrote:
<blockquote
cite="mid:57013.127.0.0.1.1217334672.squirrel@mail.netheadz.nl"
type="cite">
<blockquote type="cite">
<pre wrap="">On Mon, 28 Jul 2008, Patrick W. Gilmore wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Why haven't they used it yet? Well, I am not sure they have not.
Assuming
they have not used it yet, well, I can't tell you why.
</pre>
</blockquote>
<pre wrap="">Bad guys are bad, not stupid.
With all the kabal, they know every serious DNS operator is aware and
watching traffic, hoping to catch one of the bad guys.
The bad guys are not completely ignorant, and won'try to rob a bank when
there's a police drill going on.
</pre>
</blockquote>
<pre wrap=""><!---->
On the other hand, what if they dress up like cops and just try to fit in?
In the mean while they could be just probing security and scanning sites
for who's vulnerable and who's not.
Just a random thought.
</pre>
</blockquote>
<br>
</body>
</html>