Fight Virus With Virus?

Insanik writes "I am not an expert with internet worms like Code Red. However, I am curious if it would be possible to create a friendly worm/virus/whatever that would fight the original by using the same security holes. For instance, I read that Code Red II opens a back door. Why not have another virus that exploited the back door, closed it, then started sending itself to other servers for a certain period of time? " The submittor raises an interesting question - is this possible? I would guess so, in theory. And while we're working on Code Red, can we send a large man to the home of my latest Sircam senders and politely "ask" them to stop clicking on virii?

Anti-Sircam Virus

[zpengo]

Why not take the Symantec Sircam cleanup utility, patch it to make it self-propagating, and then e-mail it out with the message "Hi there! I send you this because you're a stupid fscking idiot. :)"

Re:Its entirely possible

[ryanvm]

I'm sure folks will scream its illegal and it probably is - but can't a case be made for 'self defense' I mean if someone brandishes a gun at me am I not within my rights to shoot them or at least take their gun away?

The problem is that 'self defense' only exists in a situation where your personal safety is at risk - like the above scenario.

It's like asking: If someone is breaking into your house to use your coffee maker, are you allowed to kick down their door and throw away all their coffee?

Basically, you can't violate someone else's rights unless your own safety is in danger.

Re:Funny,

[BigBlockMopar]

I agree. This past monday when i first login, my W2K told me it shut down in 2 minutes because it just installed an anti-code-red. this is itself exactly a virus: executing something without owner's consent...

This past Monday? Wow. I see your administrators take their time, don't they? Or did they wait until they'd been infected to decide that it might be time to take preventative measures?

Re:Its entirely possible

[Chris Burke]

It's like asking: If someone is breaking into your house to use your coffee maker, are you allowed to kick down their door and throw away all their coffee?

That's a great analogy. Mostly because of the image it conjurs.

Re:Its entirely possible

[Anonymous Coward]

And I'd say that basically nothing bad will happen to me; I'd just get a couple hundred hosts a day knocking on my door and not getting in.

But what if you were an @home customer? Then you'd say, "well, I'd be pretty much fucked and could get 1/10 the normal bandwidth from my broadband.". I don't know Tim, but he might say, "you fucking idiot, why are you with @home?".

Re:Its entirely possible

[catfood]

I'm sure folks will scream its illegal and it probably is - but can't a case be made for 'self defense' I mean if someone brandishes a gun at me am I not within my rights to shoot them or at least take their gun away?...

Why not apply the same logic to this, they are probing me to infect my server so why can't I probe back and disarm them?

I didn't ask my lawyer about this, because I know exactly what he would say. "catfood," he'd say, "what happens if you don't send the white-hat virus to those hosts that are probing you?" And I'd say that basically nothing bad will happen to me; I'd just get a couple hundred hosts a day knocking on my door and not getting in. And then my lawyer would say, "and what might happen if you do send the white-hat virus out?" At which point I'd say well, I guess it's remotely possible that I might break something, and the other host's manager might notice it...

And then my lawyer would say, "Don't be an idiot. You'd be exposing yourself for no benefit to yourself, right?"

Then I'd say okay, you're right, and my lawyer would send me a bill for $300.00.

I save a lot of money by asking myself, "what would Tim the Lawyer say?"

I can see it now...

[pukeAndCry]

VbScript that uninstalls MS Outlook?

JiM
---
[formerlegi...entist.com]
Better Living Through Reckless Experimentation

Re:Darwinian Predator - Prey relationship on the n

[Dwonis]

This is exactly the situation we want! It will force all our bosses that security is of utmost importance, and it will force Microsoft to either shape up or ship out.

If only this sort of thing weren't illegal where I live...