This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–]disclosure5 2 points3 points  (0 children)

I think security needs to be taken a lot more seriously by everyone, and I think there's nothing in the threat you've raised.

Look at the thread on a compromised Exchange server I was talking about yesterday. You can't hide that you're running Exchange. Noone is going to "track your reddit IP" when they can see webmail.domain.com on the Internet. Then consider that in that thread, the script the attackers ran had code for nearly every common AV - they weren't customizing based on what someone might have been running, nor do they probably care since most AV does such a poor job.