[Esd-l] ANN: Sanitizer 1.133 released

Brett Glass brett at lariat.org
Sat Jan 5 19:37:00 PST 2002


At 08:28 PM 1/5/2002, John D. Hardin wrote:


>Can you give me a useful example of a backreference in a filespec?

Any worm that generates names with repeating characters or patterns.
There are a few; I was thinking of coding them in.

By the way, one feature I'd like to see in the "poisoned" list: a
second field, after the file name, that lets you (optionally) tag 
the poisoned name with a message to be used when the name is discovered.
This would be useful to identify worms to the administrator and/or
a person receiving an automatic response. Right now, my local
recipes generate such strings but the general poisoning mechanism
does not.

--Brett



More information about the esd-l mailing list