Xref: utzoo comp.sys.atari.st:14249 comp.sys.apple:10263 comp.sys.mac:27259 comp.sys.ibm.pc:25202
Path: utzoo!attcan!uunet!yale!husc6!husc4!clubok
From: clubok@husc4.HARVARD.EDU (Kenneth Clubok)
Newsgroups: comp.sys.atari.st,comp.sys.apple,comp.sys.mac,comp.sys.ibm.pc
Subject: Re: Right of reply, virus- public, private- a thin line
Message-ID: <1270@husc6.harvard.edu>
Date: 24 Feb 89 17:49:09 GMT
References: <415@odin.cs.hw.ac.uk> <14940@cup.portal.com> <3936@ttidca.TTI.COM>
Sender: news@husc6.harvard.edu
Reply-To: clubok@husc4.UUCP (Kenneth Clubok)
Organization: Harvard University Science Center, Cambridge MA
Lines: 23

In all of this discussion on proliferating information about viruses, it seems
that the proponents of free exchange of information argue that it is impossible
to keep the information from those who want to make viruses, while that
information may be helpful to prevent their spread.  I would contend that 
neither statement is true.  Sure, anyone who is technically minded can find
the information in the manuals, but that is still a far cry from actually
finding source code listings in a magazine.  When source code is distributed,
anyone with an assembler can make minor modifications to the code that will
make the "mutant" virus undetectible by current virus detection programs. This
requires neither very much work nor much understaning of the workings of
viruses.  Thus, while some people will always be able to make new viruses,
it is possible to minimize that by restricting discussion.  On the other hand,
I seriously doubt that publishing source codes is very useful for preventing
the spread of viruses.  If a source code is published, then it already has
been disassembled and analyzed, and a method of detecting and removing it has
been found.  All that needs to be spread is that method, or better yet, PD
programs to do the job, but not the actual source code for the viruses.  
In short, I believe that the inevitable proliferation of mutants completely
outweighs the minimal advantages of publishing source codes.  Best to keep
the discussion to how to protect against viruses -- not how to make them.

Just thought I'd put my two-cents in.
Ken Clubok, Clubok@husc4.bitnet