<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2650.12">
<TITLE>RE: Code Red growth stats</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>> -----Original Message-----</FONT>
<BR><FONT SIZE=2>> From: Christopher A. Woodfield [<A HREF="mailto:rekoil@semihuman.com">mailto:rekoil@semihuman.com</A>]</FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> heh, maybe someone can take the worm code and use it to apply the IIS </FONT>
<BR><FONT SIZE=2>> patch instead of DoS'ing the White House... :)</FONT>
</P>
<P><FONT SIZE=2>I'd be really curious as to how the courts in various countries would handle something like that. Would patching someone else's server or system without their prior knowledge or consent be considered illegal access? Would it make a difference to the court if the server or system was actively attacking[1] your system? "Mr. Judge, I was only using the resources at my disposal to stop the attack upon my own systems." What if it wasn't attacking you? How would you all feel if the US FBI or other gov't branch patched your server without you consenting or knowing? What if someone proposed that software companies be liable for sloppy coding that allows this kind of thing to happen so frequently?</FONT></P>
<P><FONT SIZE=2>I'm guessing that several truckloads of lawyers could live off of something like that for many years.</FONT>
</P>
<P><FONT SIZE=2>Paul LANtinga.</FONT>
</P>
<P><FONT SIZE=2>[1] we all know how well defined that is. ;)</FONT>
</P>
</BODY>
</HTML>