送交者: bluesea 于 2008-12-23, 18:14:55:
回答: factual errors: Morris's worm did not "美国和欧洲大量的服务器瘫痪" 由 steven 于 2008-12-23, 18:06:22:
Supplying such detailed information as e-mail addresses and full names was considered acceptable and convenient in the early days of Internetworking, but later was considered questionable for privacy and security reasons. Finger information has been frequently used by crackers as a way to initiate a social engineering attack on a company's computer security system. By using a finger client to get a list of a company's employee names, email addresses, phone numbers, and so on, a cracker can telephone or email someone at a company requesting information while posing as another employee. The finger daemon has also had several exploitable security holes which crackers have used to break into systems. The Morris worm exploited an overflow vulnerability in fingerd (among others) to spread.