[ale] New worm destablized Internet

[Dan Man]

Better check yourself. I'm not trying to protect BOA here, but a simple
netcraft query shows that they use Netscape for the online banking and
more specifically Netscape on Solaris for the main site. Unless they are
very cleverly masking the IIS web servers as Netscape on Solaris (which
I don't believe they are), your statement about IIS has no merit. The
Yahoo article also states that American Express had problems. Please
check this out and restate your argument after you can show us that IIS
has something to do with the topic at hand. 

Online banking site:

SSL details for onlineid.bankofamerica.com
Visit Site
Organisation as given by certificate
Internet-Intranet Services
Terms of use at www.verisign.com/rpa (c)00
Bank of America Corporation
Charlotte
North Carolina
US

Common name: onlineid.bankofamerica.com

HTTPS Server
Netscape-Enterprise/4.1
Supported SSL ciphers: 

RC4 with MD5 
RC4 with MD5 (export version restricted to 40-bit key) 
RC2 with MD5 
RC2 with MD5 (export version restricted to 40-bit key) 
DES with MD5 
Triple DES with MD5 
Certificate Administrative Details
Valid from: Sep 30 00:00:00 2002 GMT  
Valid to: Sep 30 23:59:59 2003 GMT  
Serial number: 0x238b7638b58e7b8bd0f7fe53b5cd9976  

Certification Authority
VeriSign, Inc.
VeriSign International Server CA - Class 3
www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign
VeriSign Trust Network


Primary web site:
The site www.bankofamerica.com is running Netscape-Enterprise/6.0 on
Solaris 8.  


............................................
Dan Mount


-----Original Message-----
From: cfowler [mailto:cfowler at outpostsentinel.com] 
To: ale at ale.org
Sent: Sunday, January 26, 2003 12:38 PM
To: ale at ale.org
Subject: Re: [ale] New worm destablized Internet


I think this is a statement to protect the real fault here.  How come
other banks have not had similar issues?  I believe the real issues is
that BoA was hit hard by this and does nto want ppl to think less of
there services since they do have a great dependency on MS technology.

I visited the web services group of BoA and it was all Winbloze.  I
heard form them: "Unix what?  What is that?".  I'm a little scared that
my wife does all our financial stuff on there IIS servers but I'm
starting to distrust them.


On Sun, 2003-01-26 at 09:25, Christopher Ness wrote:
> On Saturday 25 January 2003 05:13 pm, Adrin wrote:
> > Thanks, I knew I was right about that little bit.  I just wonder how
Bank
> > Of America could make a statement like that now.
> 
> I don't know if everyone will get the same results, but I just got a
Bank of 
> America inline ad in the middle of the article about them having
trouble with 
> their ATMs. "All the tools you need for greater financial control."
> http://biz.yahoo.com/rc/030125/tech_virus_boa_2.html
> -- 
> Chris Ness
> mailto:cness at earthlink.net                   All jobs are equally easy
to
> http://home.earthlink.net/~cness           the person not doing the
work.
> 			   			                  Holt's
Law
> 
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale


_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale
_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale