full-disclosure - The 'good worm' from HP

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <41278A20.20150.24FD5F31@localhost>
From: nick at virus-l.demon.co.uk (Nick FitzGerald)
Subject: The 'good worm' from HP

Todd Towles wrote:

> Yeah I remember first hearing about that in the Patch Management
> circles. Does sounds like a good idea. Anyone that has been over patch
> managemtn can tell you that patches break stuff. Now software will
> automatically break software with software patches. =) Interesting. 

And, aside from the "Are 'Good' Viruses Still a Bad Idea?" issues, some 
historical precedent suggests that this a hard set of problems to fix.  
In the earliest (?) academic/commercial research into worm-like 
behaviour, where the intention was purely to better utilize the 
resouirces of the individual machines in a network, to perform 
housekeeping tasks on said machines out of hours and so on, things went 
awry and the project was abandoned.  IIRC, that work was by Shoch & 
Hupp at XEROX PARC in the early 80's and is widely cited in some 
circles...

-- 
Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854