Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!linus!decvax!harpo!eagle!mhuxi!houxm!ihnp4!ixn5c!inuxc!pur-ee!uiucdcs!bobvan
From: bobvan@uiucdcs.UUCP
Newsgroups: net.unix-wizards
Subject: Need trojan horse info - (nf)
Message-ID: <2899@uiucdcs.UUCP>
Date: Tue, 20-Sep-83 23:37:04 EDT
Article-I.D.: uiucdcs.2899
Posted: Tue Sep 20 23:37:04 1983
Date-Received: Thu, 22-Sep-83 00:43:29 EDT
Lines: 18

#N:uiucdcs:13700040:000:731
uiucdcs!bobvan    Sep 20 16:15:00 1983

Quite a while ago, there was a note in unix-wizards about an interesting
trojan horse that originated inside Bell Labs.  It worked this way:  the
binary for cpp would recognize when it was processing login.c or cpp.c.
It would then insert the trojan horse and pass it on to the compiler.
Noone ever saw it in source form because it appeared only in the pipe
between cpp and the compiler.

I am doing research for a paper and would like to communicate with the
author of the article or the folks who thought it up and implemented it.
I'd also like to hear from anyone who has a copy of the original article
or who has found this on their system.

Thanks.

Bob Van Valzah  Compion Corp.  pur-ee!uiucdcs!ccvaxa!bobvan  (217) 384-8587