Clan x86

Technical (Development, Security, etc.) => General Security Information => Topic started by: iago on February 25, 2006, 12:49:13 PM

Title: A cool idea
Post by: iago on February 25, 2006, 12:49:13 PM
I think something neat would be if somebody found an exploit in Windows' wireless stack.  Write a worm for it that spreads by walking near somebody who is infected.  Release it quietly, and track the geographical progress.  It would be just like a people virus. :)
Title: Re: A cool idea
Post by: Warrior on February 25, 2006, 01:04:53 PM
Thats genius
Title: Re: A cool idea
Post by: mynameistmp on February 26, 2006, 06:09:04 AM
Alternatively, you could find an exploit in any Windows (or any OS for that matter) component and have it spread exclusively via wireless.
Title: Re: A cool idea
Post by: iago on February 26, 2006, 12:19:47 PM
True, but then you have to start wondering if firewalls are enabled (which is pretty common with SP2). 
Title: Re: A cool idea
Post by: Warrior on February 26, 2006, 08:19:36 PM
How about exploiting Windows update so it downloads the virus directly onto your PC via Microsoft! Thanks!
Title: Re: A cool idea
Post by: Sidoh on February 26, 2006, 08:23:55 PM
Quote from: Warriorx86] link=topic=4978.msg57656#msg57656 date=1141003176]
How about exploiting Windows update so it downloads the virus directly onto your PC via Microsoft! Thanks!

GENIUS!
Title: Re: A cool idea
Post by: Blaze on February 26, 2006, 09:16:41 PM
Quote from: Sidoh on February 26, 2006, 08:23:55 PM
Quote from: Warriorx86] link=topic=4978.msg57656#msg57656 date=1141003176]
How about exploiting Windows update so it downloads the virus directly onto your PC via Microsoft! Thanks!

GENIUS!
Title: Re: A cool idea
Post by: Warrior on February 26, 2006, 09:49:49 PM
Warrior ftw.

But WAIT there is more: It will automaticly restart your PC..:D
Title: Re: A cool idea
Post by: iago on February 26, 2006, 10:26:32 PM
Yeah, but that would have nothing to do with geographical spreading and attempting to replicate human virus patterns, which is what this was about. 

Anyway, even Microsoft has some brains.  The only logical way to do this is by screwing with the DNS resolution, and I doubt Windows will automatically update without the proper certificate.  Although if I know Windows it would probably pop up a confirmation, "Are you sure you want to get hacked? yes/no"....
Title: Re: A cool idea
Post by: Sidoh on February 26, 2006, 10:36:20 PM
Quote from: iago on February 26, 2006, 10:26:32 PM
"Are you sure you want to get hacked? yes/no"....

yes plz
Title: Re: A cool idea
Post by: Warrior on February 26, 2006, 10:48:47 PM
Haha that's funny, I watched an Video on Channel9 today and the interviewer asked "Why do you turn security settings off by default". The guy paused for a bit laughed then said that they are no longer taking that approach, they say it's on by default now in Vista and future services they have (Security in general).
Title: Re: A cool idea
Post by: Ergot on February 26, 2006, 11:37:06 PM
Quote from: Warriorx86] link=topic=4978.msg57693#msg57693 date=1141012127]
Haha that's funny, I watched an Video on Channel9 today and the interviewer asked "Why do you turn security settings off by default". The guy paused for a bit laughed then said that they are no longer taking that approach, they say it's on by default now in Vista and future services they have (Security in general).
Wow, how much did they pay someone to tell them that?
Title: Re: A cool idea
Post by: Warrior on February 27, 2006, 12:08:22 AM
channel9.msdn.com
Regular people who interview Microsoft devs..
None of those people work for Microsoft, Microsoft just lets them tour around the HQ doing interviews about latest technologies. Once in a while those shocker questios pop up, the ones everyone is thinking but no one ever asks.
Title: Re: A cool idea
Post by: Ergot on February 27, 2006, 12:21:34 AM
I mean how much did they pay someone to tell them to finally put the security settings defaultly on.
Title: Re: A cool idea
Post by: Warrior on February 27, 2006, 12:40:26 AM
I think they sorta realized after XP..
Title: Re: A cool idea
Post by: Nate on February 27, 2006, 09:32:22 PM
It wouldnt have to be a virus.  Make a normal program that people can download.  Each person gets a unique signature.  Wireless device sends out that signature and the others it has accumilated to others.  Easy enough to track distribution and spread.
Title: Re: A cool idea
Post by: Sidoh on February 27, 2006, 09:41:56 PM
Quote from: Nate on February 27, 2006, 09:32:22 PM
It wouldnt have to be a virus.  Make a normal program that people can download.  Each person gets a unique signature.  Wireless device sends out that signature and the others it has accumilated to others.  Easy enough to track distribution and spread.

No.  Then people would have to make the choice to get it or not.  You don't get a choice when you're infected with a virus.  Besides, that would target a much more specific niche of people that use technology.

iago's idea would produce much more accurate results.
Title: Re: A cool idea
Post by: mc0 on February 28, 2006, 11:13:15 PM
Quote from: iago on February 25, 2006, 12:49:13 PM
I think something neat would be if somebody found an exploit in Windows' wireless stack.  Write a worm for it that spreads by walking near somebody who is infected.  Release it quietly, and track the geographical progress.  It would be just like a people virus. :)

Something sorta like this has been discovered.

http://www.nmrc.org/pub/advise/20060114.txt