[ILUG] The 1988 Internet Worm

[kevin lyda]

On Mon, Mar 05, 2001 at 12:44:52PM +0000, Thomas B. Quillinan wrote:
> Actually what I've heard about it is that he may have stolen some of
> the code from daddy :-) The dictionary attacks etc...

btw, in case people are curious the morris worm (iirc) attacked in three
ways: sendmail, finger and brute force password guessing.  it mainly
affected (or perhaps only affected) bsd unicies.  most vendors shipped
sendmail with debug mode on.  finger used gets(3) and therefore suffered
from buffer overflow.  lastly was the dictionary attacks.  this one was rather
cute - he loaded it up with women's names under the theory that most men
pick their girlfriend's names for a password.

kevin

-- 
kevin at suberic.net          i...  i have a dream.  and that dream is:
fork()'ed on 37058400      use DIY::Tiler;
meatspace place: orbit     my($t) = new DIY::Tiler;
http://suberic.net/~kevin  $t->tile(-room => "en-suite", -style => "stone");