3 ms·
Does anyone have details on how he was caught? Reading about it leads me to believe he acted covertly: >He released the worm from MIT to conceal the fact that
by jere 14y ago
Does anyone have details on how he was caught? Reading about it leads me to believe he acted covertly:
>He released the worm from MIT to conceal the fact that it actually originated from Cornell.
- DanBC2 14y agoHe crashed significant parts of the Internet, causing considerable alarm amongst sysadmins. His father was working for NSA at the time. I seem to remember he went to his father and was persuaded to own up, but maybe I misremember. Here's Eugene Spafford's write up: (http://docs.lib.purdue.edu/cgi/viewcontent.cgi?article=1701&context=cstech http://docs.lib.purdue.edu/cgi/viewcontent.cgi?article=1701&...) Page 26 > However. at a recent meeting, Professor Rick Rashid of Carnegie-Mellon University was heard to claim that Robert T. Morris, the alleged author of the Wann, had revealed the jingerd bug to system administmtivc staff at eMU well over a year ago. Here's Seely's "Tour of the Worm" (http://www.cs.unc.edu/~jeffay/courses/nidsS05/attacks/seely-RTMworm-89.html http://www.cs.unc.edu/~jeffay/courses/nidsS05/attacks/seely-...) > These notes describe how the design of TCP/IP and the 4.2BSD implementation allow users on untrusted and possibly very distant hosts to masquerade as users on trusted hosts. [Robert T. Morris, "A Weakness in the 4.2BSD Unix TCP/IP Software"] Here's Mark W. Eichin's and Jon A. Rochlis' "With Microscope and Tweezers" (http://www.mit.edu/~eichin/virus/main.html http://www.mit.edu/~eichin/virus/main.html)
- jere 14y agoThanks. Quite interesting reads.