Que sera, sera

This is an account of something that I (and a couple of friends) did at college - I was posting on slashdot.org and it seemed good enough to go into the blog as well. I think it’s an interesting case-study of the maxim “actions have consequences”...

Waaay back in the mists of time (1988) I was a 1st-year undergrad in Physics. Together with a couple of friends, I wrote a virus, just to see if we could, and let it loose on just one of the networked machines in the year-1 lab.

I guess I should say that the virus was completely harmless, it just prepended 'Copyright (c) 1988 The Virus' to the start of directory listings. It was written for BBC micro's (the lab hadn't got onto PC's by this time, and the Acorn range had loads of ports, which physics labs like :-)

It spread like wildfire. People would come in, log into the network, and become infected because the last person to use their current computer was infected. It would then infect their account, so wherever they logged on in future would also infect the computer they were using then. A couple of hours later, and most of the lab was infected.

You have to remember that viruses in those days weren't really networked. They came on floppy disks for Atari ST's and Amiga's. I witnessed people logging onto the same computer "to see if they were infected too". Of course, the act of logging in would infect their account as well...

Unsurprisingly, "Authority" was not amused. Actually they were seriously unamused, not that they caught us. They shut down the year-1,2,3 network and disinfected all the accounts on the network server by hand. Ouch.

There were basically 3 ways the virus could be activated:

• 
  
• Typing any '*' command (eg: '*.' (star-dot), which gave you a directory listing. Sneaky, I thought, since the virus announced itself when you did a '*.' When you thought you'd beaten it, you'd do a '*.' to see if it was still there :-)
  
• The events (keypress, network, disk etc.) all activated the virus if inactive, and also re-enabled the interrupts, if they had been disabled
  
• The interrupts (NMI,VBI,..) all activated the virus if inactive, and also re-enabled the events, if they had been deactivated.
  

On activation, the virus would replicate itself to the current mass-storage media. This was to cause problems because we hadn't really counted on just how effective this would be. Within a few days of the virus being cleansed (and everyone settling back to normal), it suddenly made a re-appearance again, racing through the network once more within an hour or two. Someone had put the virus onto their floppy disk (by typing *. on the floppy rather than the network) and had then brought the disk back into college and re-infected the network. Oops.

If we thought authority was unamused last time, this time they held a meeting for the entire department, and calmly said the culprit when found would be expelled. Excrement and fans came to mind. Of course, they thought we'd just re-released it, but in fact it was just too successful for comfort...

Since we had "shot our bolt", owning up didn't seem like a good idea. The only solution we came up with was to write another (silent, this time :-) virus which would disable any copy of the old one, whilst hiding itself from the users. We built in a time-to-die of a couple of months, let it go, and prayed...

We had actually built in a kill-switch to the original virus, which would disable and remove it - we didn't want to be infected ourselves (at the start). Of course, it became a matter of self-preservation to be infected later on in the saga - 3 accounts unaccountably (pun intended :-) uninfected = red flag ... It wasn't too hard to destroy the original by having the new virus "press" the key combination that deleted the old one.

So, everyone was happy. Infected with the counter-virus, but happy. "Authority" thought they'd laid down the law, and been taken seriously (oh if they knew...) and we'd not been expelled. Everyone else lost their infections within a few months ...

Anyway. I've never written anything remotely like a virus since [grin]

The cowardly attack (let's face it, any terrorist attack is that of cowards) on London this morning merits mention, I think.

The terrorist announcement mentioned the Brits being in fear from North to South, East to West. Whereas that may have described some countries' reactions, it didn't come close to ours. Let's just look at some of the reaction...

There was an interview of a woman who was on one of the bombed trains, 2 carriages down. She was calm and concise in how she described the events. She was confident that they would be caught. She said others around had a similar disposition.

The Mayor of London released what I thought was a pretty good statement. Let me just pick out the part he addressed to the cowards:

Finally, I wish to speak directly to those who came to London today to take life.

I know that you personally do not fear giving up your own life in order to take others - that is why you are so dangerous. But I know you fear that you may fail in your long-term objective to destroy our free society and I can show you why you will fail.

In the days that follow look at our airports, look at our sea ports and look at our railway stations and, even after your cowardly attack, you will see that people from the rest of Britain, people from around the world will arrive in London to become Londoners and to fulfil their dreams and achieve their potential.

They choose to come to London, as so many have come before because they come to be free, they come to live the life they choose, they come to be able to be themselves. They flee you because you tell them how they should live. They don't want that and nothing you do, however many of us you kill, will stop that flight to our city where freedom is strong and where people can live in harmony with one another. Whatever you do, however many you kill, you will fail.

And finally, a piece I found on a football forum:

No-one in Britain has over-reacted, it's not in our nature to do so. There'll be many dark, scared days ahead for everyone who lives or works in London or any of the major cities in the UK, and there will be overwhelming feelings of sympathy for those who have lost friends, family or loved ones in these cowardly attacks today.

But it won't change anything. There will be no sudden feelings of "these people have a genuine issue", no hands of friendship offered, no olive branches extended. There will be no immediate "Let's invade " or severing of diplomatic links with any countries. There will simply be a very thorough, in depth, but quiet investigation.

And when we find out who did this they will pay.

Rest in peace those thirty people who died today. Their lives have meant nothing to their killers, but their deaths have brought tragedy to those who loved them.

From those who were attacked, to those in power, to the common man, the theme is the same: complete disdain for the cowards; controlled anger that will focus the effort to find them; and an unshakeable determination that above all, the cowards must not win.

What does that mean ? It means that life will go on, and that (apart from the personal tragedy of the victims families) nothing will change. There's no magic bullet for terrorism, but ignoring the effects of the cowards actions whilst seeking them out and (I suspect) simply eliminating them, quietly, would appear to be the best option.

I'm actually in two minds about that last sentence. There is a lot of good PR to be had from publically arresting, trying, convicting, and treating a terrorist like any other murderer. The IRA members jailed in the H blocks long tried to argue they were political prisoners rather than murderous cowards...

On the other hand it could create a martyr. The other option is simply to quietly kill the coward and claim (perhaps even accurately) that there was no other way, if it ever got out to the public. I can't imagine many things more terrifying to a terrorist than to have colleagues just turning up dead. "Am I next ?" is a real problem for a coward...

Simon