full-disclosure - Culprit Bio: Perfect Storm Averted or Just Ahead?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: steve.wray at paradise.net.nz (Steve Wray)
Subject: Culprit Bio: Perfect Storm Averted or Just Ahead?

> [mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of 
> Henrik Persson
> On Thu, 2004-01-29 at 16:06, Clairmont, Jan wrote:
> > The guy who wrote this virus and/or unleashed it should not 
> > be too hard to track down.  One, they are a Forth programmer, old
school.
> > I once met the Guy who invented Forth('83) and was in a 
> > seminar where he talked it up, not too many programmer then, not
now.  
> > This language is very compact and powerful allowing a lot of
functionality 
> > in a compact environment.  There is the CVS tag that mentions Andy.
So 
> > there is an association with Andy and Forth.  Finally, the person
knows 
> > communications programming, old school,
> > tcp, ports, and sockets not portals etc, probably in assembler or C.
> 
> ..Oh...please. Not too hard to track down?! :D
> 
> I know at least 10 people that is capable of all the things 
> you mention (well..except forth.. I only know two of those..)

You know 10 people named Andy that also fit that profile?

It would take quite some cunning for a person to use CVS under
a pseudonym and then to make it look as it they'd accidentally
included that CVS tag information in the released virus just
to throw people off the trail.

My guess is either they are named Andy or they have a close associate,
whose code they borrowed, called Andy.