RE: Culprit Bio: Perfect Storm Averted or Just Ahead?

[Steve Wray <steve.wray () paradise net nz>]

> [mailto:full-disclosure-admin () lists netsys com] On Behalf Of 
> Henrik Persson
> On Thu, 2004-01-29 at 16:06, Clairmont, Jan wrote:
> > The guy who wrote this virus and/or unleashed it should not 
> > be too hard to track down.  One, they are a Forth programmer, old
school.
> > I once met the Guy who invented Forth('83) and was in a 
> > seminar where he talked it up, not too many programmer then, not
now.  
> > This language is very compact and powerful allowing a lot of
functionality 
> > in a compact environment.  There is the CVS tag that mentions Andy.
So 
> > there is an association with Andy and Forth.  Finally, the person
knows 
> > communications programming, old school,
> > tcp, ports, and sockets not portals etc, probably in assembler or C.
>
> ..Oh...please. Not too hard to track down?! :D
>
> I know at least 10 people that is capable of all the things 
> you mention (well..except forth.. I only know two of those..)

You know 10 people named Andy that also fit that profile?

It would take quite some cunning for a person to use CVS under
a pseudonym and then to make it look as it they'd accidentally
included that CVS tag information in the released virus just
to throw people off the trail.

My guess is either they are named Andy or they have a close associate,
whose code they borrowed, called Andy.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html