9fans archive / 2001 / 09 / 361 /    prev next

From: "Boyd Roberts" <boyd@fr.inter.net>
Subject: Re: [9fans] authorization schemes (was CORBA)
Date: Wed, 26 Sep 2001 19:55:27 +0200

> The best part (cf a paper in Usenix Computing Systems) was that they
> caught a virus that someone else accidently unleashed.

yeah, i think it was duff.  he'd stick the virus in the last block
of a demand paged binary [0413], jump to it, infect other binaries
and then jump back to main.  i guess it mangled the entry point
in the a.out header and then snarfed it away to jump back to.

by this stage 8/9/10th Ed was being used, which was based on 4.1BSD,
and it had demand paged binaries.

iirc duff had forgotten about this virus.