Path: utzoo!attcan!uunet!steinmetz!ge-dab!cadsun!cochran
From: cochran@cadsun.DAB.GE.COM (Craig Cochran)
Newsgroups: comp.sources.wanted
Subject: Re: WANTED: disassembled copy of internet virus
Message-ID: <1435@ge-dab.GE.COM>
Date: 14 Nov 88 22:11:17 GMT
References: <5011@polya.Stanford.EDU>
Sender: news@ge-dab.GE.COM
Reply-To: cochran@ge-dab.GE.COM (Craig Cochran)
Followup-To: Where does this really go, anyhow?
Organization: GE Simulation & Control Systems Dept., Daytona Beach, FL
Lines: 37

In article <5011@polya.Stanford.EDU> waters@umunhum.Stanford.EDU (Jim Waters) writes:
>
>  I was recently informed that some folks at Purdue did a real nice
>job of symbolically disassembling the binary part of the recent
>Internet virus.  Unfortunately, I haven't been able to find a copy
>locally.  Is there anyone out there who snagged a copy who would be
>kind enough to mail it to me?

I'm sure that your interest in the virus source (or disassembled version
of same) is of pure academic nature, but do you think it is a good idea
to have publicly distributed copies of this program lying around the
net?  While most of us have "immunized" ourselves against this
particular strain, this is something that may come back to bite us
again in the future in the event that some irresponsible user
(nothing insinuated here) accidentally or purposely unleashes a
similar blight upon us a year or more down the road.  With the
source or assembly code available, it wouldn't be difficult to
modify the virus to get around the publicly distributed patch.

Am I overly paranoid?  Granted I myself was very interested in reading
Gene Spafford's description of how the virus worked, but knowledge in the
wrong hands is hazardous.  I'm as much of a UNIX enthusiast as anyone,
but I'm inclined to think the virus should be placed under lock
and key until the (very-powerful-yet-too-open) UNIX System matures
into a secure O/S.

Again, am I paranoid?  Comments accepted via e-mail, or post if appropriate.

-Craig

(Standard Disclaimers apply.)

--
Craig S. Cochran <cochran@ge-dab.GE.COM> 
                                            General Electric Company
UUCP:   ...!mcnc!ge-rtp!ge-dab!cochran      1800 Volusia Ave, Rm 4112
Phone:  (904) 239-3124                      Daytona Beach, FL 32015