Why is this a nasty attack? Compare to:
1. Portscan a lot of computers; save the results
2. When there's a security update, hit the computers running that program
It doesn't require you to have a mirror (and hence a large traceable presence) and hits all
targets, not just one distro. It's less targetted, but how often has that been a problem in
Internet attacks?