funsec mailing list archives

RE: write viruses? it's controversy time of the month


From: Blanchard_Michael () emc com
Date: Wed, 30 Aug 2006 10:49:29 -0400

Nope.....  Self destructs like that don't matter in the first couple days to
the people that get hit with your creation, that wasn't supposed to get out,
but did, when they're stuck in the office for days cleaning up the mess that
essentially you made to their company's machines.


Michael P. Blanchard 
Antivirus / Security Engineer, CISSP, GCIH, CCSA-NGX, MCSE
Office of Information Security & Risk Management 
EMC ² Corporation 
4400 Computer Dr. 
Westboro, MA 01580 

-----Original Message-----
From: Dude VanWinkle [mailto:dudevanwinkle () gmail com] 
Sent: Tuesday, August 29, 2006 7:31 PM
To: Blue Boar
Cc: Valdis.Kletnieks () vt edu; funsec () linuxbox org; Blanchard, Michael
(InfoSec)
Subject: Re: [funsec] write viruses? it's controversy time of the month

On 8/29/06, Blue Boar <BlueBoar () thievco com> wrote:
Valdis.Kletnieks () vt edu wrote:
Remember - it's the *exact* same thing, morally, as if you had been
keeping
a virus sample that somebody else wrote, and you whoopsed and let it
loose.

I disagree that accidentally releasing an instance of a known virus
sample is as bad as releasing an instance of an unknown virus sample
that you crafted.

What if the viruses you create are programmed to only work on a
private IP range (10.254.127.0/24), or that expire after a certain
date (say 1 week).

Does that remove the unwanted moral hangups?

-JP

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: