[Openvas-discuss] "Are you dead?" Really?

Andrew Robinson arob at rescor.net
Tue Apr 10 17:46:19 CEST 2018


Yes, _I_ appreciate the humor and irony. But the client didn’t find it even slightly humorous, particularly when the nurses in the hospital almost triggered the lockdown protocol because they thought they were under an active threat. An over-reaction for sure, but as I try to advance OpenVAS as a professional tool on par with it’s commercial sibling, Nessus, this doesn’t make my job any easier.

I manually patched libopenvas_nasl.so.9.0.1 to change the string from “are you dead ?” to “function check” 

Something like this should be done in the OpenVAS source. Or at least make it a string that can be set, and NOT default to “are you dead ?” no matter how ironic or humorous that default might be.

> On Apr 10, 2018, at 11:14, Alex Smirnoff <ark at eltex.net> wrote:
> 
> If it asks "Are you alive? Prove it!" then it might be more scary. Even
> if it is a printer, not a toaster ;-)
> 
> On Mon, Apr 09, 2018 at 07:05:46PM +0000, Stewart Joseph wrote:
>> You must admit, there is more than a touch of ironic humor there.  I ran a scan of a Deli's network and when it hit their receipt printer it printed out about 3 feet with the word "Hello" in it.  I wasn't there when it hit.  They thought the printer had become self-aware.
>> 
>> Stewart Joseph, CTO
>> LEK Technology Consultants
>> 407-877-6505 x1103
>> www.lekcomp.com
>> 
>> -----Original Message-----
>> From: Openvas-discuss <openvas-discuss-bounces at wald.intevation.org> On Behalf Of Andrew Robinson
>> Sent: Thursday, March 29, 2018 1:48 PM
>> To: openvas-discuss at wald.intevation.org
>> Subject: [Openvas-discuss] "Are you dead?" Really?
>> 
>> Running an openvas scan with printer scanning enabled CAN result in several pages containing the string “are you dead?” being printed. In this case, in a hospital, in the ob/gyn suite.
>> 
>> Not good.
>> 
>> I’ve searched through the NVTs and can’t find where this string is sourced. Does anyone know?
>> _______________________________________________
>> Openvas-discuss mailing list
>> Openvas-discuss at wald.intevation.org
>> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
>> _______________________________________________
>> Openvas-discuss mailing list
>> Openvas-discuss at wald.intevation.org
>> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.wald.intevation.org/pipermail/openvas-discuss/attachments/20180410/d7a1f204/attachment.html>


More information about the Openvas-discuss mailing list