It is a situation where MCSEs had no idea that there is a fundamental vulnerability in IIS and ISAPI mapping and so had no way to protect their systems other than after-the-fact patching.

Most of them, ... appear to be just plain thieves.

That could be a real wave of traffic that the Internet has not dealt with.

It's not a major risk. It's not [doing] either of the two things that are terribly damaging. One is hurting people's machines, and one is knocking things [off-line].

There is a wave of people looking for infected machines. We are getting into the second wave of infections. We haven't figured what they are doing. But we are seeing a very big wave of scanning.

All the new PCs and the new Web servers, multiplied by the fear of top management about security breaches and business-stopping system failures, kept these salaries [growing] three times as fast as salaries [across all industries].

[Saturday's worm] is the recruitment of soldiers, not telling the soldiers where to aim their guns.

It gives anyone on the Internet who comes in as a browsing user the ability to take control of your site. Instead of looking at Web pages, they can make your computer do whatever they want.

It would have been terrible (without the widespread patching). That got a lot of systems fixed.