[ale] New worm destablized Internet

[cfowler]

I'm just repeating what I saw after I went to there Charlotte
headquarters about 1.8 years ago.  It is very possible that in that time
frame they might have had the vision to change from IIS to something
else.  I think that there is someone on this lest that was laid off from
them in NC that can elaborate on their equipment.


On Sun, 2003-01-26 at 13:48, Dan Man wrote:
> Better check yourself. I'm not trying to protect BOA here, but a simple
> netcraft query shows that they use Netscape for the online banking and
> more specifically Netscape on Solaris for the main site. Unless they are
> very cleverly masking the IIS web servers as Netscape on Solaris (which
> I don't believe they are), your statement about IIS has no merit. The
> Yahoo article also states that American Express had problems. Please
> check this out and restate your argument after you can show us that IIS
> has something to do with the topic at hand. 
> 
> Online banking site:
> 
> SSL details for onlineid.bankofamerica.com
> Visit Site
> Organisation as given by certificate
> Internet-Intranet Services
> Terms of use at www.verisign.com/rpa (c)00
> Bank of America Corporation
> Charlotte
> North Carolina
> US
> 
> Common name: onlineid.bankofamerica.com
> 
> HTTPS Server
> Netscape-Enterprise/4.1
> Supported SSL ciphers: 
> 
> RC4 with MD5 
> RC4 with MD5 (export version restricted to 40-bit key) 
> RC2 with MD5 
> RC2 with MD5 (export version restricted to 40-bit key) 
> DES with MD5 
> Triple DES with MD5 
> Certificate Administrative Details
> Valid from: Sep 30 00:00:00 2002 GMT  
> Valid to: Sep 30 23:59:59 2003 GMT  
> Serial number: 0x238b7638b58e7b8bd0f7fe53b5cd9976  
> 
> Certification Authority
> VeriSign, Inc.
> VeriSign International Server CA - Class 3
> www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign
> VeriSign Trust Network
> 
> 
> Primary web site:
> The site www.bankofamerica.com is running Netscape-Enterprise/6.0 on
> Solaris 8.  
> 
> 
> ............................................
> Dan Mount
> 
> 
> -----Original Message-----
> From: cfowler [mailto:cfowler at outpostsentinel.com] 
> Sent: Sunday, January 26, 2003 12:38 PM
> To: ale at ale.org
> Subject: Re: [ale] New worm destablized Internet
> 
> 
> I think this is a statement to protect the real fault here.  How come
> other banks have not had similar issues?  I believe the real issues is
> that BoA was hit hard by this and does nto want ppl to think less of
> there services since they do have a great dependency on MS technology.
> 
> I visited the web services group of BoA and it was all Winbloze.  I
> heard form them: "Unix what?  What is that?".  I'm a little scared that
> my wife does all our financial stuff on there IIS servers but I'm
> starting to distrust them.
> 
> 
> On Sun, 2003-01-26 at 09:25, Christopher Ness wrote:
> > On Saturday 25 January 2003 05:13 pm, Adrin wrote:
> > > Thanks, I knew I was right about that little bit.  I just wonder how
> Bank
> > > Of America could make a statement like that now.
> > 
> > I don't know if everyone will get the same results, but I just got a
> Bank of 
> > America inline ad in the middle of the article about them having
> trouble with 
> > their ATMs. "All the tools you need for greater financial control."
> > http://biz.yahoo.com/rc/030125/tech_virus_boa_2.html
> > -- 
> > Chris Ness
> > mailto:cness at earthlink.net                   All jobs are equally easy
> to
> > http://home.earthlink.net/~cness           the person not doing the
> work.
> > 			   			                  Holt's
> Law
> > 
> > 
> > _______________________________________________
> > Ale mailing list
> > Ale at ale.org
> > http://www.ale.org/mailman/listinfo/ale
> 
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale


_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale