Joe Stewart is currently "Director of Malware Research" at SecureWorks (a private securityconsultancy) [read reverse engineering, highly trained lab dog & sec-con hobo]. Joe has participated in development for: http://www.joestewart.org/?page_id=5 and submitted extensive virus content contributions and research to various projects. Most of the top level reverse engineers nationally interact either via test venues, information sharing or conferences. http://www.joestewart.org/ http://blog.fireeye.com/research/2009/03/cimbot---a-technical-analysis.html www.isotf.org/isoi3.html So, yea, he's a Honeywell project contributer (or reverse engineer). On Mon, May 4, 2009 at 9:06 AM, Dazed_75 wrote: > > > On Sun, May 3, 2009 at 2:35 PM, Lisa Kachold wrote: > >> The Honeynet project (sponsoring 9 projects in Google's Summer of Code >> this year) has a really great LiveCD called Roo, that creates an immediate >> trap of magnificent proportions: >> >> https://projects.honeynet.org/honeywall/attachment/wiki/WikiStart/roo-1.4.hw-20090425114542.iso >> >> Roo, like Knoppix Tools on a USB key, is one of those must have items for >> everyone. Be careful however of the legal implications, which include >> liability (you built it insecure, knowingly - what is someone uses it as a >> jumping off place?), complicity, entrapment and more. If you are game, it's >> exceedingly fun; rather like a Cracker SimCity? >> >> Honeynet reverse engineers also built a very amusing "Eye Chart" for >> determining immediate infection with the worm: >> http://www.confickerworkinggroup.org/infection_test/cfeyechart.html > > > According to > http://www.confickerworkinggroup.org/wiki/pmwiki.php/Main/HomePage this > was created by Joe Stewart from SecureWorks. I just wondered if he is part > of what you referred to as "Honeynet reverse engineers"? > >> >> >> www.obnosis.com (503)754-4452 >> "Contradictions do not exist." A. Rand >> >> --------------------------------------------------- >> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us >> To subscribe, unsubscribe, or to change your mail settings: >> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss >> > > > > -- > Dazed_75 a.k.a. Larry > > --------------------------------------------------- > PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us > To subscribe, unsubscribe, or to change your mail settings: > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss > -- www.obnosis.com (503)754-4452 "Contradictions do not exist." A. Rand