Patrick Giagnocavo wrote:
On Mar 31, 2007, at 11:57 PM, Gadi Evron wrote:
You do realize this post is not about Microsoft or IE 0days, right?
Your words made it clear that it was.
Generalizing from "Windows 0day" to "coordinate shutdown of DNS for evil domain in a timely fashion" is just obfuscating that the only reason to do so is because Windows is the way it is.
As I see it, the problem at hand is the current Windows 0day. What Gadi is doing is concentrating on a tactic it is using to justify solving what he sees as a more general problem (DNS abuse) that could be used by an exploit to any operating system. By solving it, this could mitigate future problems. We're looking at the alligators surrounding us. Gadi is trying to convince us to help him in draining the swamp (which may indeed be a positive thing in the long run). Does that sound about right? -- Jeff Shultz