Path: utzoo!attcan!uunet!lll-winken!lll-tis!helios.ee.lbl.gov!pasteur!agate!labrea!rutgers!mailrus!umich!itivax!scs
From: scs@itivax.UUCP (Steve C. Simmons)
Newsgroups: news.admin
Subject: Re: Getting Even
Message-ID: <366@itivax.UUCP>
Date: 8 Nov 88 03:03:59 GMT
References: <367@execu.UUCP> <265@acheron.UUCP> <1636@pikes.Colorado.EDU> <1016@mace.cc.purdue.edu>
Reply-To: scs@itivax.UUCP (Steve C. Simmons)
Organization: Industrial Technology Institute
Lines: 16

Re all the stuff on the virus writer as good guy vs bad guy:

There was a recent fix posted to FTP that closed a hole.  It went
out on high priority via the same newsgroup as the first worm
stompers.  It cost me about $100 of my time to apply at ITI, and got
near 100% coverage around Ann Arbor within two days.

By comparison, the worm cost me 400 user-hours of downtime, and about
50 man-hours of hands-on work by various folks -- and we were never
even infected.

Both sets of holes were closed.  But what a world of difference in
how!
-- 
Steve Simmons		...!umix!itivax!scs
Industrial Technology Institute, Ann Arbor, MI.
"You can't get here from here."