Path: utzoo!attcan!uunet!seismo!sundc!pitstop!sun!decwrl!purdue!iuvax!silver!sl148033
From: sl148033@silver.bacs.indiana.edu (Kevin_Clendenien)
Newsgroups: news.sysadmin
Subject: Re: Possible Fines for Virus Perpetrator
Message-ID: <2649@silver.bacs.indiana.edu>
Date: 9 Nov 88 08:53:43 GMT
References: <456@l5comp.UUCP> <12081@dscatl.UUCP> <16600@agate.BERKELEY.EDU> <5331@medusa.cs.purdue.edu> <271@eda.com> <418@auspex.UUCP>
Reply-To: sl148033@silver.UUCP (Kevin_Clendenien)
Distribution: na
Organization: Indiana University BACS, Bloomington
Lines: 37

I've seen some pretty crazy things written here.  I think everyone, with
the exception of Matthew P. Wiener/Brahms Gang/Berkeley CA 94720, has
expressed valid points.  Mr. Wiener has been just plain rude, as well
as ridiculous.

I think both camps have valid points.  When an organization, or individual
links into this network, they are accepting the responsibility for 
looking after security on their system.  After all, if their system is
not secure, then they are compromising the security of all those systems
that they a linked with.  It seems apparent from the success of this
worm, that many organizations/individuals have not lived up to their
responsibility to bring a secure system to the network.  Likewise, the
vendors have not lived up to their responsibility.

This does not lesson what the perpetrator of this worm has done.  They
have, without permission, eaten up thousands of CPU hours, and thousands
of man hours.  I find it hard to believe that anyone, even the
perpetrator, can reason that it was okay to use someone else's computer,
without permission.  Now, I know some of you are going to say that there
was implied consent, since the security on the violated systems allowed
the worm in.  This is hogwash.  Releasing the worm onto the network
was wrong!

Of course, these are just my opinions.  They aren't that important.  What
is important, is to realize that everyone is at fault.  The vendors,
the organizations using the network, and the creator of the worm.
Punishment should be metted out to all.  Well, the organizations using
the network have the man hours and CPU hours as punishment.  The
worm's creator should meet some punishment.  I would favor community
service.  I don't want to lesson the offense, but any judge will have
to look at the fact that the worm was not destructive.  The only ones
getting off here are the vendors.  How should they be punished?
----------------------------------------------------------------------
sl148033@silver.UUCP                          -Kevin Clendenien
"The best way to fight fire, is with fire..."
----------------------------------------------------------------------