I have a suggestion to:

Learn to update.


Half of these worms would have never made the news if people updated like they have been told to from the begining. They all seemed to exploit some flaw that was patched a long time ago, and somehow it stillw hacks servers.... I don't know how my school got infected with Sasser considering they know about me.

I have a question:

How exactly is it that in ym town there are almost NO tech related jobs, as they are all filled, yet these peopelt aking them can't update? There Windows boxes! Clicking Windows update shouldn't be THAT hard!

I understand sometimes you have to wait because a patch maybreak somethign else but good God why wait until it's to late?

Anyway, I'll continue my laugh fest at the morons who get infected. Unless you were installing a new machine of course, then you don't have the patches. Even then, any person who says they are an admin should have a router blocking everything until the patches are installed.

It's not hard, when a new patch comes out because some gross hole was found in your OS, INSTALL THE PATCH!

These companies who get whacked by worms, they are the ones who are setting a bad example, you should know better. Patch, it's not hard. I have yet to get any of these worms on my systems that ran WIndows, and I've made plenty of fresh installs.

A 50 dollar router usually can defend while you install patches, so why can't these huge companies with better routers pull it off?

Hmm, *Looks* I think I know another reason my network is clean:

A Pentium 3 733 MHz machine with 384 MBs RAM, a Sound Blaster Live! and 43 GB HD and Nvidia Riva TNT2 card running Slackware 9.1 (The box I'm typing from)

A Celeron 2.40 GHz machine, 512 MB RAM, 80 GB HD, SUSE 9.1 Professional

An AMD Athlon XP 2600 + at 2.13 GHz 512 MB RAM and 120 GB HD, Slackware 10

These are my boxes in my room on this desk. The only non Linux/BSD box in this house is my Mom's Windows 2000 Professional machine, which I have locked down like a politician's daughter when she's dating.

I can safely say my uptime is the "5 9's" of coolness. I'm a good BOFH

You can hire me to telecommute by PM me. All I need is a root SSH session and I'll fix you up, and keep your users on their toes






EDIT:


Tiger, most AV products can be defeated:

Open a Hex editor and change the name of the program, on older AV products, this would allow you to upload virii on a server. Not sure if it still works, I lost my Corporate AV disk.