Every day we get at least one email asking about a string they find in their own weblogs.

It'll look something like this:

/w00tw00t.at.ISC.SANS.DFind

or

/w00tw00t.at.ISC.SANS.test0

As we detailed on the website, about 4 years ago.  This tool has nothing to do with the ISC:

http://isc.sans.org/diary.html?storyid=900

We disavow and disapprove of it's unauthorized use.

These are not the droids you are looking for.

-- Joel Esler http://www.joelesler.net