Path: utzoo!utgpu!attcan!uunet!lll-winken!ames!pacbell!well!odawa
From: odawa@well.UUCP (Michael Odawa)
Newsgroups: comp.sys.mac.programmer
Subject: Re: Suggestion for virus prevention
Keywords: CODE resource virus detection
Message-ID: <10355@well.UUCP>
Date: 15 Jan 89 04:44:24 GMT
References: <1272@viscous.sco.COM> <3614@tekig4.TEK.COM> <27491@ucbvax.BERKELEY.EDU> <10330@well.UUCP> <8048@claris.com>
Reply-To: odawa@well.UUCP (Michael Odawa)
Organization: Simple Software, Mill Valley, CA
Lines: 32

In article <8048@claris.com> peirce@claris.com (Michael Peirce) writes:
>In article <10330@well.UUCP> odawa@well.UUCP (Michael Odawa) writes:
>>
>>We also recommend that your program refuse to continue running (i.e., that
>>you ExitToShell() after notifying the user) if its integrity has been 
>>compromised.

>Users shouldn't normally continue using virus infected software...but there
>are times when it makes sense...to "continue at his own risk".

>If there's a problem strongly warn the user against proceeding, but do
>allow it.  Otherwise...you'll be getting irate customers.

If your warning is worded properly their irritation will be directed right
where it belongs, at the low-life who released the virus.

Even in the example Mr. Peirce (a fine programmer and great virus fighter,
by the way) gave, the infection of a product producing a report just before
its deadline, there are other less destructive alternatives than continuing
the epidemic.  These might include cleaning up the problem with Repair or a
similar fixer, using a different computer, etc.

Why would you want people using your product, when you know it's been
damaged in indeterminate ways?  What if the virus is one which wipes out the
hard disk?  How would the user be in a position to make an intelligent
decision?  Even with a warning, you'd be flirting with product liability
lawsuits if you allowed the user to continue.  Seems to me, if you can't
guarantee the integrity of your product, you shouldn't let it run.

Michael Odawa
Software Development Council
odawa@well.UUCP