Author Topic: Suspected LovSan author questioned  (Read 727 times)

Offline DmdMac

  • Copper Member
  • **
  • Posts: 178
Suspected LovSan author questioned
« Reply #15 on: August 29, 2003, 07:46:45 PM »
Quote
Originally posted by fd ski
Let's clarift some things:

A) he's accused of writing a variant - hence decompiling an EXE and changing it slightly. As such he ain't no genious. Most of people here wiht basic knowledge of C and programming could have easily done that.


Possibly if you point me to a decompiler. I've never seen one.  I've worked with plenty of disassemblers though. The biggest goof he did was to put any reference back to himself within the code, i.e. the IP to his website. That's more the Wiley Coyote, Super Genious type of genious.


Quote

b) he didn't do much damage in persepctive. He could have done far worst. If the virus deleted all DLLs off the infeced machine, we would be all still at work rebuilding machines. Considering what he could have done, he didn't do much.


With all respect to truth, still and example is needed.  They(the makers) need to know that what they are doing is not wanted.

Offline Chairboy

  • Probation
  • Plutonium Member
  • *******
  • Posts: 8221
      • hallert.net
Suspected LovSan author questioned
« Reply #16 on: August 29, 2003, 08:38:30 PM »
Saying that he should be let off because he 'could have done worse' is silly.  Say someone rapes a person, do you let them go because they could have killed them too but didn't?

This person is responsible for billions of dollars in recovery, lost business, and countless late night hours for those repairing the infections.
"When fascism comes to America it will be wrapped in the flag and carrying a cross." - Sinclair Lewis

Offline Fishu

  • Gold Member
  • *****
  • Posts: 3789
Suspected LovSan author questioned
« Reply #17 on: August 30, 2003, 08:10:46 AM »
Quote
Originally posted by fd ski
Let's clarift some things:

b) he didn't do much damage in persepctive. He could have done far worst. If the virus deleted all DLLs off the infeced machine, we would be all still at work rebuilding machines. Considering what he could have done, he didn't do much.


He did do somewhat more damage than the viruses usually does.
Even companies were affected by this virus which was capable of infecting unpatched systems on itself, without the users input on the matter.
Usually when a company finds out their computers have been infected by a virus, they basically shut down all the business until the computers are clean.
So if a part of company stops doing business for half a day or even a whole day, the damages aren't going to be light.

Luckily, the authorities were able to block the 20 computers which on the lovsan relied.
We don't know yet what sort of instructions the virus could have received from these 20 computers - it could well been deleting of DLL's or something worse.... or even something as little as a joke.
We don't know...  but in any case it was very serious.

The estimates of damages caused by this particular virus, has been around 7 billion dollars!
Good thing the 20 computers weren't up.

Offline ccvi

  • Gold Member
  • *****
  • Posts: 2074
      • http://www.carl-eike-hofmeister.de/
Suspected LovSan author questioned
« Reply #18 on: August 30, 2003, 08:52:25 AM »
They most probably got the wrong one. He can't be so incredibly stupid to leave easy traces back to him.

Who is going to sue the administrators who did not apply the latest patches that were available for the bug that allowed the worm to work?

Who is going to sue microsoft for not notifying each of its customers individually? If it turns out that the brakes on a car can easily be made to fail by childs play, every car manufacturer is going to recall all of them immediately.

A homogenous networks is bound to be vulnerable by attacks, it doesn't work in aggriculture either.

Offline Fishu

  • Gold Member
  • *****
  • Posts: 3789
Suspected LovSan author questioned
« Reply #19 on: August 30, 2003, 09:14:00 AM »
I want to see windows recalled for fixing :D