2 ms·
Well, the command server also had directory listing enabled. The bad people just didn't bother with properly configuring their (hacked?) box.
by revelation 14y ago
Well, the command server also had directory listing enabled. The bad people just didn't bother with properly configuring their (hacked?) box.
- ChuckMcM 14y agoUnclear that it was a mistake. Clearly the FBI or whomever would suponea records of every machine that accessed those logs, by letting this 'leak' and having lots of people then access the logs, which then gives the actual bad guys a way to access them with plausible denieability. Like kidnapping, malware has the problem with externally visibile trails that you can't hide and still pull it off. The story about the stuxnet C&C servers being setup as an advertising service was clearly to throw off suspicions about random outcalls to those servers.