Path: utzoo!utgpu!jarvis.csri.toronto.edu!cs.utexas.edu!tut.cis.ohio-state.edu!pt.cs.cmu.edu!rochester!ken From: ken@cs.rochester.edu (Ken Yap) Newsgroups: alt.folklore.computers Subject: Re: Evil Programs Keywords: Evil Programs Message-ID: <1990Jan18.035331.16358@cs.rochester.edu> Date: 18 Jan 90 03:53:31 GMT References: <1289@husc6.harvard.edu> Reply-To: ken@cs.rochester.edu Followup-To: comp.virus Organization: University of Rochester Computer Science Department Lines: 14 Address: Rochester, NY 14627, (716) 275-1448 |Anyone else know of any Evil Programs? You only have to subscribe to comp.virus to read some less than funny stories. :-( Here's the obligatory war story: When Telerays T1061s were first acquired by the department, it didn't take a hacker long to realize that you could squirt an escape sequence to program a function key with a string and then execute that string. The obvious target would be a super-user's tty, of course. Fortunately this hacker wore white and told staff, who promptly fixed write(1) and mail(1) to filter out escapes and make the terminal mode default to no write at login.