X-Message-Index: 057
X-Message-Prev: 056
X-Message-Next: 055
X-Thread-Prev: 054
X-Thread-Next: 059
From: bzs@bu-cs.BU.EDU (Barry Shein)
To: phage
X-To: comer, bostic@okeeffe.Berkeley.EDU, phage
Subject: Disassembled virus?
Date: Sat, 5 Nov 88 16:31:32 EST
X-Date: Sat 16:31:32 05/11/1988 EST


I agree with Doug Comer. Was there *really* anything in there that was
terribly sophisticated? I don't think so from what I've seen of it (we
had some of it at Encore late Friday.)

Let's face it, 99.9% of the virus was the hole in sendmail, he (or
anyone else) could have done *anything* with that, "rm -rf /" after
re-propagating wouldn't take much genius although more nefarious
things are possible. Exploiting .rhosts is not exactly the stuff of
rocket scientists (apologies to JPL :-)

I say publish it for the curious though I would agree to wait until
more discussion occurs, there's certainly no rush.

	-Barry Shein, ||Encore||