Reply #12: OK. Here's my two questions: [View All]

[Junkdrawer]

1.) This particular exploit only works if RPC is turned on and port 135 is open. If this was true for either GEMS host machines or AccuTouch units, my first question is WHY? Fredda has told us again and again they were "stand alone machines".

2.) This exploit was discovered by (wait for it...) The Last Stage of Delirium Research Group in Poland. Several other small, Eastern European "security" firms made news a few years back:
http://www.cnn.com/2001/TECH/internet/03/08/hacker.attacks/

<snip>
The FBI says the Eastern European groups, after successfully hacking into a company, then attempt to extort the company offering services to solve the computer vulnerability.

"If the victim company is not cooperative in making payments or hiring the group for their security services, the hackers' correspondence has become more threatening," the FBI announcement said.
<snip>

My next question is: why did this firm reveal this juicy little exploit FOR FREE?