|
DataMuseum.dkPresents historical artifacts from the history of: DKUUG/EUUG Conference tapes |
This is an automatic "excavation" of a thematic subset of
See our Wiki for more about DKUUG/EUUG Conference tapes Excavated with: AutoArchaeologist - Free & Open Source Software. |
top - metrics - downloadIndex: T s
Length: 62667 (0xf4cb) Types: TextFile Names: »spaf_usenix_talk.PS«
└─⟦4f9d7c866⟧ Bits:30007245 EUUGD6: Sikkerheds distributionen └─⟦this⟧ »./papers/Misc/spaf_usenix_talk.PS«
%!PS-Adobe-1.0 %%Creator: devps (Pipeline Associates, Inc.) %%CreationDate: Fri Dec 16 16:34:07 1988 %%Pages: (atend) %%DocumentFonts: (atend) /X /exch load def /r /rmoveto load def /m /moveto load def /l /lineto load def /rl /rlineto load def /lc{yc X xc X l st} bind def /mc{yc X xc X m} bind def /el{gs /a X def a div 1 X scale cp np a xc 2 div 0 360 arc st gr} bind def /ar{cp 7 2 roll np xc 5 1 roll atan 3 1 roll atan X arc st} bind def /sp{yc X xc X 6 2 roll yc X xc X 6 2 roll yc X xc X 6 2 roll ct} bind def /st /stroke load def /gs /gsave load def /gr /grestore load def /cp /currentpoint load def /np /newpath load def /ct /curveto load def /m0{0 0 moveto} bind def /BP{/devps-save save def m0} bind def /EP{ clear devps-save restore showpage} bind def /res 10.000000 def /V{res neg div 792 add currentpoint pop X m} bind def /H{res div currentpoint X pop transform round exch round exch itransform moveto} bind def /h{res div 0 r} bind def /v{res neg div 0 X r} bind def /xc{res div} bind def /yc{res neg div 792 add} bind def /S{X H show} bind def /psize 10 def /height 1 def /slant 0 def /FF{findfont X dup 12 div setlinewidth /psize X def [psize 0 psize height mul slant sin slant cos div mul psize height mul 0 0] makefont setfont} bind def /shade{gs /dy X def /dx X def np m setgray 0 dy rl dx 0 rl 0 dy neg rl dx neg 0 rl closepath fill gr} bind def 1 setlinecap /C{/Courier FF}def /R{/Times-Roman FF}def /B{/Times-Bold FF}def /I{/Times-Italic FF}def %% Troff special characters not on Symbol font %% Copyright (C) 1986 by Pipeline Associates, Inc. %% Version 1.0 /altRTD 20 dict def altRTD begin /s{setcachedevice}def /C{1000 1000 scale}def /m /moveto load def /c /curveto load def /S /stroke load def /l /lineto load def /a /arcto load def /p /pop load def /sl /setlinewidth load def end /F_Troff 17 dict def F_Troff begin systemdict /currentpacking known {/SavePacking currentpacking def true setpacking}if /PaintType 0 def /FontType 3 def /StrokeWidth 0 def /UniqueID 8277003 def /FontMatrix [.001000 0 0 .001000 0 0] def /FontBBox [-12 -105 942 855 ] def /Encoding 256 array def /CD 256 1 add dict def /FontInfo 3 dict def FontInfo begin /UnderlinePosition -133 def /UnderlineThickness 20 def end /FontName (Troff) def 0 1 256 1 sub{Encoding exch /.notdef put}for CD /.notdef{500 0 setcharwidth{}}put Encoding (1) 0 get /br put %% bold vertical rule used by tbl CD /br{ C 0 0 -.5 -.5 1 1 s np .05 sl 0 -.1 m 0 .9 l {S} }put Encoding (2) 0 get /ul put %% underline used by tbl CD /ul{ C .5 0 -.5 -.5 1 1 s np .05 sl 0 -.1 m .5 -.1 l {S} }put Encoding (3) 0 get /ru put %% baseline rule CD /ru{ C .5 0 -.5 -.5 1 1 s np .05 sl m0 .5 0 l {S} }put Encoding (4) 0 get /vr put %% vertical rule CD /vr{ C 0 0 -.5 -.5 1 1 s np .05 sl m0 0 1 l {S} }put Encoding (5) 0 get /sq put %% square CD /sq{ C .5 0 -.5 -.5 1 1 s np .05 sl 0 .25 m 0 .5 rl .5 0 rl 0 -.5 rl -.5 0 rl closepath {S} }put Encoding (6) 0 get /bx put %% solid box CD /bx{ C .5 0 -.5 -.5 1 1 s np 0 .25 m 0 .5 rl .5 0 rl 0 -.5 rl -.5 0 rl closepath {fill} }put Encoding (7) 0 get /rn put %% radical extender CD /rn{ C .5 0 -.5 -.5 1 1 s np .03 sl -.03 .9 m .5 0 rl {S} }put Encoding (8) 0 get /GR put %% gray mask CD /GR{ C .5 0 setcharwidth .5 setgray np 0 -.1 m 0 1 rl .5 0 rl 0 -1 rl -.5 0 rl closepath {fill} }put Encoding 97 /a put CD /a{1000 0 0 66 942 421 s 430 415 m 578 406 678 349 662 319 c 655 306 614 287 583 296 c 570 300 466 340 438 332 c 365 309 335 213 270 209 c 0 310 m 108 310 l 108 114 l 0 114 l 0 310 l 42 161 m 42 134 l 66 134 l 66 161 l 42 161 l 47 155 m 47 140 l 62 140 l 62 155 l 47 155 l 110 133 m 226 113 300 66 410 80 c 497 91 550 69 634 76 c 645 76 663 92 669 107 c 677 125 673 141 668 160 c 725 334 m 758 332 734 253 701 250 c 501 325 m 475 316 476 309 473 302 c 465 282 482 263 499 257 c 552 236 615 253 689 253 c 701 253 713 236 713 218 c 712 194 702 168 678 161 c 671 159 663 160 655 160 c 591 158 516 156 479 168 c 461 173 453 191 453 210 c 453 224 456 235 466 244 c 476 253 490 252 503 255 c 459 84 m 447 96 435 106 435 123 c 435 136 440 145 447 155 c 453 163 462 168 469 173 c 110 293 m 173 318 300 421 435 415 c 609 407 852 416 885 411 c 898 409 924 411 930 380 c 942 316 828 339 742 334 c 731 334 730 335 725 335 c 701 336 685 336 660 336 c{S}}put Encoding 98 /b put CD /b{1000 0 -12 66 930 421 s 500 415 m 352 406 252 349 268 319 c 275 306 316 287 347 296 c 360 300 464 340 492 332 c 565 309 595 213 660 209 c 930 310 m 822 310 l 822 114 l 930 114 l 930 310 l 888 161 m 888 134 l 864 134 l 864 161 l 888 161 l 883 155 m 883 140 l 868 140 l 868 155 l 883 155 l 820 133 m 704 113 630 66 520 80 c 433 91 380 69 296 76 c 285 76 267 92 261 107 c 253 125 257 141 262 160 c 205 334 m 172 332 196 253 229 250 c 429 325 m 455 316 454 309 457 302 c 465 282 448 263 431 257 c 378 236 315 253 241 253 c 229 253 217 236 217 218 c 218 194 228 168 252 161 c 259 159 267 160 275 160 c 339 158 414 156 451 168 c 469 173 477 191 477 210 c 477 224 474 235 464 244 c 454 253 440 252 427 255 c 471 84 m 483 96 495 106 495 123 c 495 136 490 145 483 155 c 477 163 468 168 461 173 c 820 293 m 757 318 630 421 495 415 c 321 407 78 416 45 411 c 32 409 6 411 0 380 c -12 316 102 339 188 334 c 199 334 200 335 205 335 c 229 336 245 336 270 336 c{S}}put Encoding 99 /c put CD /c{1000 0 184 0 827 627 s 185 315 m 186 488 332 627 505 625 c 682 623 827 467 815 290 c 804 124 666 0 500 0 c 327 0 184 142 185 315 c{S}}put Encoding 100 /d put CD /d{590 0 134 158 477 500 s 300 160 m 208 162 134 238 135 330 c 136 423 212 500 305 500 c 397 500 473 427 475 335 c 477 239 396 158 300 160 c{fill}}put Encoding 101 /e put % Bell Symbol CD /e{1010 0 -100 -210 1010 1010 s 100 sl 0 setlinecap 420 300 450 0 360 arc 420 650 m 420 575 l S newpath 120 125 m 720 125 l 75 sl S 420 125 m 420 25 l S 220 400 m 220 175 120 175 100 a p p p p 220 400 m 220 550 420 550 80 a p p p p 620 400 m 620 175 720 175 100 a p p p p 620 400 m 620 550 420 550 80 a p p p p 295 550 m 545 550 l{S}}put /BuildChar{altRTD /BuildChar get exec}def end altRTD begin /BuildChar{altRTD begin /char exch def /fontdict exch def save /charname fontdict /Encoding get char get def fontdict /StrokeWidth get sl fontdict /CD get dup charname known {charname}{/.notdef}ifelse get newpath exec fontdict /PaintType get 0 eq{exec}{p S}ifelse restore end}def end systemdict /currentpacking known{F_Troff /SavePacking get setpacking}if /Troff F_Troff definefont pop /Y1{/Troff FF}def %%EndProlog %%Page: 1 1 BP /slant 0 def /height 1.000000 def 10 C 10 R 1230 V 12 B 1753(Some)S 2069(Musings)S 2540(on)S 2703(Ethics)S 3060(and)S 3290(Computer)S 3852(Break-Ins)S 1470 V 10 I 2659(Eugene)S 2988(H.)S 3115(Spafford)S 1650 V 10 R 2363(Department)S 2864(of)S 2977(Computer)S 3407(Sciences)S 1770 V 2692(Purdue)S 3005(University)S 1890 V 2461(W.)S 2610(Lafayette,)S 3041(IN)S 3176(47907-2004)S 2130 V 2654(spaf@cs.purdue.edu)S 2500 V 10 I 2823(ABSTRACT)S 2796 V 11 R 1510(In)S 1650(November)S 2161(and)S 2368(December,)S 2893(the)S 3076(computing)S 3597(community)S 4149(experienced)S 4726(the)S 2926 V 1260(release)S 1633(of)S 1795(the)S 2000(Internet)S 2411(Worm,)S 2789(computer)S 3273(break-ins)S 3750(at)S 3899(Lawrence)S 4398(Livermore)S 3056 V 1260(National)S 1678(Labs,)S 1959(and)S 2158(the)S 2333(temporary)S 2824(disconnection)S 3475(of)S 3607(the)S 3782(Milnet)S 4117(because)S 4503(of)S 4635(com-)S 3186 V 1260(puter)S 1554(break-ins)S 2030(on)S 2208(a)S 2324(machine)S 2763(belonging)S 3271(to)S 3425(the)S 3627(Mitre)S 3939(Corporation.)S 4599(These)S 3316 V 1260(incidents)S 1690(have)S 1929(led)S 2096(to)S 2215(many)S 2492(discussions)S 3027(about)S 3304(responsibility)S 3937(and)S 4128(ethics.)S 4479(Many)S 4769(of)S 3446 V 1260(these)S 1549(discussions,)S 2143(particularly)S 2712(in)S 2862(forums)S 3237(such)S 3502(as)S 3657(the)S 3855(Usenet,)S 4251(have)S 4520(become)S 3576 V 1260(heated)S 1578(without)S 1948(leading)S 2304(to)S 2423(any)S 2614(commonly-accepted)S 3535(conclusions.)S 3742 V 1510(This)S 1748(paper)S 2032(addresses)S 2493(some)S 2767(of)S 2900(these)S 3167(points.)S 3540(The)S 3752(intent)S 4045(is)S 4161(to)S 4289(summarize)S 4812(a)S 3872 V 1260(few)S 1465(of)S 1598(the)S 1774(principal)S 2205(arguments)S 2703(supporting)S 3215(various)S 3579(positions)S 4019(and)S 4218(to)S 4345(argue)S 4628(some)S 4002 V 1260(points)S 1566(of)S 1693(particular)S 2148(merit.)S 2477(At)S 2623(the)S 2794(end,)S 3017(references)S 3500(are)S 3669(given)S 3950(to)S 4073(material)S 4469(that)S 4671(may)S 4132 V 1260(help)S 1482(provide)S 1850(background)S 2400(material)S 2792(for)S 2952(readers)S 3299(seeking)S 3667(further)S 3997(information.)S 4298 V 1510(Included)S 1929(in)S 2052(this)S 2249(discussion)S 2745(are)S 2914(the)S 3085(questions)S 3538(of)S 3666(whether)S 4055(individuals)S 4582(break-)S 4428 V 1260(ing)S 1460(into)S 1691(our)S 1896(machines)S 2369(are)S 2560(doing)S 2870(us)S 3027(a)S 3134(favor,)S 3451(and)S 3668(whether)S 4079(those)S 4370(individuals)S 4558 V 1260(should)S 1588(in)S 1708(any)S 1900(way)S 2116(be)S 2253(encouraged.)S 2852(The)S 3057(paper)S 3334(concludes)S 3807(with)S 4038(some)S 4305(observations)S 4688 V 1260(about)S 1539(the)S 1708(importance)S 2236(of)S 2362(the)S 2531(discussion,)S 3053(and)S 3246(the)S 3415(need)S 3656(to)S 3776(reach)S 4045(a)S 4127(consensus)S 4606(in)S 4726(the)S 4818 V 1260(computer)S 1707(profession,)S 2225(if)S 2325(not)S 2499(in)S 2618(society)S 2962(as)S 3086(a)S 3167(whole.)S 5198 V 11 B 900(Introduction)S 5364 V 11 R 1150(On)S 1325(November)S 1828(2,)S 1952(a)S 2041(program)S 2453(was)S 2664(run)S 2851(on)S 3002(the)S 3177(Internet)S 3558(that)S 3764(replicated)S 4236(itself)S 4497(on)S 4648(thousands)S 5129(of)S 5494 V 900(machines,)S 1384(often)S 1651(loading)S 2023(them)S 2285(to)S 2413(the)S 2589(point)S 2858(where)S 3166(they)S 3397(were)S 3650(unable)S 3984(to)S 4112(process)S 4481(normal)S 4833(requests.)S 5624 V 900(This)S 11 I 1135(Internet)S 1521(Worm)S 11 R 1828(program)S 2238(was)S 2447(stopped)S 2828(in)S 2954(a)S 3042(matter)S 3362(of)S 3493(hours,)S 3805(but)S 3986(the)S 4160(controversy)S 4717(engendered)S 5754 V 900(by)S 1062(its)S 1219(release)S 1573(has)S 1771(raged)S 2065(for)S 2244(weeks.)S 2630(The)S 2852(occurrence)S 3381(of)S 3524(other)S 3801(machine)S 4224(break-ins,)S 4710(possibly)S 5129(as)S 5884 V 900(``copycat'')S 1417(acts,)S 1648(has)S 1827(only)S 2056(served)S 2374(to)S 2493(fuel)S 2696(these)S 2954(discussions.)S 6050 V 1150(It)S 1252(is)S 1361(important)S 1824(that)S 2024(we)S 2186(discuss)S 2539(these)S 2799(issues.)S 3158(The)S 3363(continuing)S 3869(evolution)S 4320(of)S 4447(our)S 4629(technological)S 6180 V 900(base)S 1128(and)S 1320(our)S 1500(increasing)S 1984(reliance)S 2363(on)S 2507(computers)S 2998(for)S 3159(critical)S 3497(tasks)S 3751(implies)S 4109(that)S 4307(future)S 4601(incidents)S 5031(may)S 6310 V 900(well)S 1130(be)S 1274(more)S 1540(serious)S 1892(in)S 2019(their)S 2261(consequences.)S 2964(We)S 3157(must)S 3414(also)S 3633(admit)S 3926(that)S 4133(there)S 4393(will)S 4607(be)S 4752(more)S 5019(such)S 6440 V 900(incidents,)S 1359(with)S 1589(human)S 1922(nature)S 2229(as)S 2354(varied)S 2661(and)S 2853(extreme)S 3239(as)S 3363(it)S 3458(is,)S 3593(and)S 3784(with)S 4013(the)S 4180(technology)S 4701(as)S 4825(available)S 6570 V 900(as)S 1024(it)S 1119(is.)S 6736 V 1150(This)S 1383(paper)S 1662(presents)S 2058(a)S 2143(brief)S 2386(introduction)S 2961(to)S 3085(a)S 3171(few)S 3372(of)S 3501(the)S 3673(major)S 3967(issues)S 4268(that)S 4471(have)S 4715(been)S 4959(raised)S 6866 V 900(by)S 1044(the)S 1212(Worm)S 1526(incident.)S 1975(My)S 2162(intent)S 2447(is)S 2555(to)S 2675(present)S 3025(some)S 3291(of)S 3416(the)S 3584(arguments)S 4075(on)S 4219(each)S 4451(of)S 4575(these)S 4833(topics)S 5129(as)S 6996 V 900(a)S 990(basis)S 1252(for)S 1421(further)S 1760(thought)S 2139(and)S 2340(discussion.)S 2903(References)S 3430(are)S 3605(provided)S 4038(at)S 4160(the)S 4337(end)S 4538(of)S 4672(the)S 4849(paper)S 5134(to)S 7126 V 900(enable)S 1218(the)S 1385(interested)S 1844(reader)S 2148(to)S 2267(explore)S 2628(particular)S 3080(aspects)S 3429(of)S 3553(the)S 3720(problem)S 4119(in)S 4238(greater)S 4573(depth.)S 7920 V EP %%Page: 2 2 BP /slant 0 def /height 1.000000 def 11 R 11 R 850 V 1150(In)S 1282(the)S 1457(following)S 1926(discussion,)S 2454(I)S 2531(have)S 2779(separated)S 3233(issues)S 3538(that)S 3745(often)S 4012(have)S 4260(been)S 4508(combined)S 4983(when)S 980 V 900(debated.)S 1341(This,)S 1605(by)S 1755(itself,)S 2043(may)S 2272(help)S 2500(to)S 2625(clarify)S 2949(some)S 3220(of)S 3350(the)S 3523(issues;)S 3856(it)S 3957(is)S 4070(possible)S 4470(that)S 4674(most)S 4928(people)S 1110 V 900(are)S 1065(in)S 1184(agreement)S 1672(on)S 1815(some)S 2080(of)S 2204(these)S 2462(points)S 2765(once)S 3004(they)S 3226(are)S 3391(viewed)S 3740(as)S 3864(individual)S 4344(issues.)S 1370 V 11 B 900(A)S 1012(Comment)S 1507(on)S 1657(Ethics)S 1536 V 11 R 1150(Ethics)S 1465(is)S 1579(the)S 1753(study)S 2032(of)S 2163(what)S 2416(is)S 11 I 2530(right)S 11 R 2785(to)S 2911(do.)S 3122(Alternatively,)S 3769(it)S 3871(is)S 3985(sometimes)S 4496(described)S 4955(as)S 5086(the)S 1666 V 900(study)S 1174(of)S 1300(what)S 1548(is)S 11 I 1657(good)S 11 R 1912(and)S 2105(how)S 2329(to)S 2450(achieve)S 2818(that)S 3018(good.)S 3334(To)S 3491(enable)S 3810(me)S 3978(to)S 4098(suggest)S 4462(whether)S 4848(an)S 4985(act)S 5146(is)S 1796 V 900(right)S 1155(or)S 1293(wrong,)S 1648(it)S 1757(is)S 1878(necessary)S 2349(for)S 2523(me)S 2704(to)S 2837(describe)S 3248(an)S 3398(ethical)S 3737(system)S 4090(that)S 4302(you,)S 4542(the)S 4723(reader,)S 5069(can)S 1926 V 900(understand)S 1427(and)S 1631(apply.)S 1982(I)S 2064(have)S 2316(made)S 2599(the)S 2779(simplifying)S 3334(assumption)S 3882(that)S 4092(we)S 4264(can)S 4460(judge)S 4749(the)S 4928(ethical)S 2056 V 900(nature)S 1212(of)S 1342(an)S 1484(act)S 1651(by)S 1801(applying)S 2226(a)S 2314(Kantian)S 2701(assessment:)S 3260(would)S 3575(we)S 3742(view)S 3995(that)S 4200(act)S 4367(as)S 4498(proper)S 4823(if)S 11 B 4930(every-)S 2186 V 900(one)S 11 R 1101(were)S 1348(to)S 1470(engage)S 1815(in)S 1937(it)S 2035(on)S 2181(a)S 2265(regular)S 2610(basis?)S 2946(Although)S 3397(I)S 3468(am)S 3637(aware)S 3931(that)S 4131(this)S 4326(may)S 4550(be)S 4688(too)S 4864(simplis-)S 2316 V 900(tic)S 1052(a)S 1142(model)S 1459(\(and)S 1695(it)S 1799(could)S 2085(be)S 2230(argued)S 2569(that)S 2776(other)S 3044(ethical)S 3379(philosophies)S 3979(can)S 4173(also)S 4393(be)S 4539(applied\),)S 4969(I)S 5048(will)S 2446 V 900(use)S 1105(this)S 1324(as)S 1473(a)S 1579(\256rst)S 1809(approximation)S 2508(for)S 2693(purposes)S 3141(of)S 3290(argument.)S 3823(Kant's)S 4173(work)S 4456(has)S 4660(considerably)S 2576 V 900(in\257uenced)S 1402(our)S 1593(contemporary)S 2246(ethical)S 2583(thought,)S 2993(and)S 3196(using)S 3480(this)S 3685(approach)S 4130(provides)S 4554(an)S 4703(understand-)S 2706 V 900(able,)S 1153(initial)S 1454(point)S 1724(of)S 1858(reference;)S 2334(the)S 2510(reader)S 2823(unfamiliar)S 3322(with)S 3560(the)S 3736(philosophy)S 4268(and)S 4468(science)S 4831(of)S 4964(ethics)S 2836 V 900(may)S 1122(wish)S 1363(to)S 1482(consult)S 1833(some)S 2098(of)S 2222(the)S 2389(cited)S 2635(references)S 3114(for)S 3274(further)S 3604(information.)S 3002 V 1150(Note)S 1403(that)S 1608(this)S 1808(philosophy)S 2338(assumes)S 2744(that)S 11 I 2949(right)S 11 R 3204(is)S 3318(determined)S 3851(at)S 3970(least)S 4211(as)S 4342(much)S 4626(by)S 4777(actions)S 5129(as)S 3132 V 900(by)S 1056(results.)S 1450(Some)S 1747(ethical)S 2085(philosophies)S 2688(assume)S 3057(that)S 3268(``the)S 3519(ends)S 3765(justify)S 4092(the)S 4271(means.'')S 4696(Our)S 4911(current)S 3262 V 900(society)S 1249(does)S 1488(not)S 1667(operate)S 2026(by)S 2174(such)S 2413(a)S 2499(philosophy,)S 3055(although)S 3478(many)S 3760(individuals)S 4288(do.)S 4497(As)S 4657(a)S 4743(society)S 5093(we)S 3392 V 900(profess)S 1256(to)S 1382(believe)S 1737(that)S 1941(``it)S 2114(isn't)S 2349(whether)S 2740(you)S 2944(win)S 3148(or)S 3278(lose,)S 3522(it's)S 3702(how)S 3930(you)S 4134(play)S 4362(the)S 4535(game.'')S 4911(This)S 5146(is)S 3522 V 900(why)S 1135(we)S 1308(are)S 1486(concerned)S 1980(with)S 2222(issues)S 2532(of)S 2670(due)S 2875(process)S 3250(and)S 3455(civil)S 3698(rights,)S 4024(even)S 4277(for)S 4451(those)S 4730(individuals)S 3652 V 900(espousing)S 1373(repugnant)S 1844(views.)S 3818 V 1150(In)S 1274(summary,)S 1744(to)S 1863(judge)S 2140(the)S 2307(ethical)S 2632(good)S 2885(of)S 3009(an)S 3145(activity)S 3508(by)S 3652(the)S 3820(results)S 4141(rather)S 4429(than)S 4652(the)S 4820(means)S 5134(to)S 3948 V 900(achieve)S 1277(those)S 1553(results)S 1884(is)S 2002(not)S 2187(in)S 2317(keeping)S 2708(with)S 2948(our)S 3138(current)S 3491(social)S 3790(mores.)S 4162(Also,)S 4441(it)S 4546(is)S 4663(important)S 5134(to)S 4078 V 900(note)S 1131(that)S 1338(philosophies)S 1937(that)S 2144(consider)S 2557(the)S 2733(results)S 3062(as)S 3195(the)S 3371(measure)S 3777(of)S 3910(good)S 4172(are)S 4346(often)S 4613(impossible)S 5134(to)S 4208 V 900(apply)S 1177(because)S 1555(of)S 1679(the)S 1846(di)S 1932 H (f)show 11 -.5 mul h (\256)show 11 R 2024(culty)S 2277(of)S 2401(understanding)S 3056(exactly)S 3405(what)S 3651(results)S 3971(from)S 4217(any)S 4408(arbitrary)S 4817(activity.)S 4374 V 1150(Consider)S 1584(an)S 1724(\(extreme\))S 2185(example:)S 2624(if)S 2728(the)S 2899(government)S 3460(were)S 3708(to)S 3831(behead,)S 4205(on)S 4353(live)S 4556(TV,)S 4768(1000)S 5026(peo-)S 4504 V 900(ple)S 1072(chosen)S 1414(at)S 1531(random)S 1904(because)S 2287(they)S 2514(smoke,)S 2867(then)S 3094(the)S 3265(result)S 3546(might)S 3841(well)S 4067(be)S 4207(that)S 4409(many)S 4690(hundreds)S 5129(of)S 4634 V 900(thousands)S 1393(of)S 1537(smokers)S 1956(would)S 2284(quit)S 2509(``cold)S 2823(turkey,'')S 3257(thus)S 3495(prolonging)S 4032(their)S 4287(lives.)S 4610(It)S 4731(might)S 5043(also)S 4764 V 900(prevent)S 1264(hundreds)S 1702(of)S 1829(thousands)S 2305(of)S 2432(people)S 2760(from)S 3009(ever)S 3232(starting)S 3598(to)S 3720(smoke,)S 4070(thus)S 4289(improving)S 4783(the)S 4952(health)S 4894 V 900(and)S 1110(longevity)S 1578(of)S 1722(the)S 1909(general)S 2283(populace.)S 2792(Despite)S 3180(the)S 3367(great)S 3638(good)S 3911(this)S 4124(would)S 4452(hold)S 4701(for)S 4881(society,)S 5024 V 900(everyone)S 1353(except)S 1691(for)S 1871(a)S 1971(few)S 2186(extremists)S 2690(would)S 3017(condemn)S 3471(such)S 3724(an)S 3879(idea)S 4113(as)S 4256(immoral.)S 4742(We)S 4945(would)S 5154 V 900(likely)S 1186(object)S 1489(even)S 1730(if)S 1832(only)S 2063(one)S 2256(person)S 2583(were)S 2829(involved.)S 3310(It)S 3412(would)S 3722(not)S 3898(matter)S 4213(what)S 4461(the)S 4630(law)S 4823(might)S 5117(be)S 5284 V 900(on)S 1043(such)S 1277(a)S 1358(matter;)S 1702(we)S 1862(would)S 2170(not)S 2344(feel)S 2540(that)S 2738(it)S 2833(was)S 3036(morally)S 3411(correct.)S 5450 V 1150(Note)S 1415(that)S 1632(we)S 1811(would)S 2138(be)S 2293(unable)S 2637(to)S 2775(judge)S 3071(the)S 3257(morality)S 3682(of)S 3825(such)S 4078(an)S 4233(act)S 4413(by)S 4576(evaluating)S 5086(the)S 5580 V 900(results,)S 1262(because)S 1654(we)S 1828(would)S 2150(not)S 2338(know)S 2629(the)S 2810(full)S 3010(scope)S 3306(of)S 3444(those)S 3723(results.)S 4118(Such)S 4385(an)S 4535(act)S 4709(might)S 5014(have)S 5710 V 900(e)S 948 H (f)show 11 -.5 mul h (f)show 11 R 1015(ects)S 1218(on)S 1361(issues)S 1657(of)S 1781(law,)S 2000(public)S 2308(health,)S 2637(tobacco)S 3010(use,)S 3217(and)S 3408(daytime)S 3795(TV)S 3974(shows)S 4282(for)S 4443(decades)S 4822(or)S 4947(centu-)S 5840 V 900(ries)S 1098(to)S 1224(follow.)S 1612(Such)S 1872(a)S 1960(system)S 2305(of)S 2435(ethics)S 2730(would)S 3044(not)S 3224(allow)S 3507(us)S 3644(to)S 3769(evaluate)S 4172(our)S 4357(current)S 4705(activities)S 5141(at)S 5970 V 900(the)S 1067(time)S 1296(we)S 1456(would)S 1764(need)S 2003(such)S 2237(guidance.)S 6230 V 11 B 900(Issues)S 1215(and)S 1427(Discussion)S 6396 V 11 R 1150(One)S 1367(of)S 1493(the)S 1662(\256rst)S 1869(issues)S 2167(to)S 2288(be)S 2426(discussed)S 2882(after)S 3116(the)S 3285(release)S 3622(of)S 3748(the)S 3917(Internet)S 4292(Worm)S 4607(dealt)S 4855(with)S 5086(the)S 6526 V 900(intent)S 1192(of)S 1324(the)S 1499(author.)S 1881(A)S 2001(common)S 2427(topic)S 2688(of)S 2820(speculation)S 3361(was)S 3572(exactly)S 3928(why)S 4157(the)S 4331(Worm)S 4651(program)S 5062(had)S 6656 V 900(been)S 1149(written)S 1503(and)S 1704(released)S 2104(to)S 2233(the)S 2410(Internet.)S 2854(Suggested)S 3349(explanations)S 3947(put)S 4131(forth)S 4387(by)S 4540(the)S 4718(community)S 6786 V 900(have)S 1139(ranged)S 1469(from)S 1715(``simple)S 2114(accident'')S 2583(to)S 2702(``the)S 2941(actions)S 3285(of)S 3409(a)S 3490(hostile)S 3817(sociopath.'')S 6952 V 1150(The)S 1366(problem)S 1778(with)S 2020(any)S 2224(speculation)S 2770(on)S 2926(this)S 3132(topic)S 3398(is)S 3518(that)S 3729(we)S 3902(do)S 4058(not)S 11 B 4245(know)S 11 R 4550(the)S 4731(real)S 4941(intent.)S 7082 V 900(Although)S 1357(an)S 1501(author)S 1822(has)S 2009(been)S 2256(alleged,)S 2641(he)S 2785(has)S 2972(not)S 3154(made)S 3432(any)S 3631(public)S 3947(statement)S 4408(about)S 4692(his)S 4861(reasons;)S 7212 V 900(because)S 1279(of)S 1404(pending)S 1792(legal)S 2039(actions,)S 2412(it)S 2508(is)S 2616(unlikely)S 3011(that)S 3210(such)S 3445(a)S 3527(statement)S 3982(will)S 4188(be)S 4325(made)S 4596(anytime)S 4984(soon.)S 7920 V EP %%Page: 3 3 BP /slant 0 def /height 1.000000 def 11 R 11 R 850 V 900(Thus,)S 1181(any)S 1372(suppositions)S 1957(about)S 2234(his)S 2396(intent)S 2680(must)S 2928(be)S 3064(viewed)S 3413(as)S 3537(little)S 3773(better)S 4055(than)S 4277(guesswork.)S 1016 V 1150(One)S 1370(speculation)S 1908(can)S 2097(be)S 2238(addressed,)S 2735(however.)S 3210(Some)S 3499(individuals)S 4027(contend)S 4412(that)S 4615(the)S 4788(release)S 5129(of)S 1146 V 900(the)S 1069(program)S 1475(was)S 1680(an)S 1818(accident\320that)S 2492(it)S 2589(somehow)S 3045(``escaped'')S 3568(during)S 3889(test.)S 4137(There)S 4425(is)S 4533(one)S 4725(compelling)S 1276 V 900(reason)S 1235(that)S 1450(suggests)S 1873(that)S 2088(this)S 2298(is)S 2422(not)S 2613(the)S 2797(case:)S 3065(the)S 3249(program)S 3670(had)S 3878(no)S 4038(way)S 4271(of)S 4413(being)S 4708(stopped,)S 5129(as)S 1406 V 900(would)S 1221(be)S 1370(be)S 1518(the)S 1697(case)S 1929(if)S 2041(it)S 2148(were)S 2404(being)S 2693(tested.)S 3055(The)S 3270(code)S 3521(contained)S 3992(no)S 4147(check)S 4446(that)S 4656(would)S 4976(allow)S 1536 V 900(someone)S 1326(to)S 1448(halt)S 1649(the)S 1819(program,)S 2254(nor)S 2436(was)S 2642(there)S 2896(any)S 3091(mechanism)S 3628(to)S 3751(limit)S 3998(the)S 4169(spread)S 4491(o)S 4546 H (f)show 11 -.5 mul h (f)show 11 R 4650(the)S 4821(machine.)S 1666 V 900(The)S 1107(code)S 1350(did)S 1528(not)S 1706(check)S 1997(for)S 2161(any)S 2356(\256le)S 2534(or)S 2662(other)S 2924(condition)S 3377(that)S 3579(would)S 3891(signal)S 4191(it)S 4289(should)S 4619(stop.)S 4900(Rather,)S 1796 V 900(it)S 1003(contained)S 1470(code)S 1717(to)S 1844(evaluate)S 2249(with)S 2486(caution)S 2850(and)S 3049(sometimes)S 3561(ignore)S 3882(the)S 4057(one)S 4257(condition)S 4715(that)S 4922(was)S 5134(to)S 1926 V 900(limit)S 1154(its)S 1302(growth\320the)S 1900(presence)S 2324(of)S 2458(another)S 2829(Worm)S 3152(on)S 3305(the)S 3482(same)S 3750(machine.)S 4225(Once)S 4498(started,)S 4861(the)S 5038(pro-)S 2056 V 900(gram)S 1161(would)S 1472(spread)S 1793(unchecked.)S 2357(For)S 2546(these)S 2807(reasons,)S 3199(it)S 3297(seems)S 3601(implausible)S 4151(that)S 4352(the)S 4522(code)S 4764(was)S 4971(under)S 2186 V 900(test.)S 1155(Thus,)S 1444(the)S 1619(conclusion)S 2136(must)S 2392(be)S 2536(that)S 2742(the)S 2917(Worm)S 3238(was)S 3449(started)S 3782(on)S 3932(purpose\320it)S 4491(was)S 4701(a)S 4789(deliberate)S 2316 V 900(act.)S 2482 V 1150(It)S 1254(has)S 1437(been)S 1680(argued)S 2014(that)S 2217(the)S 2389(Worm)S 2707(was)S 2915(released)S 3310(to)S 3434(illustrate)S 3857(security)S 4242(defects)S 4589(to)S 4713(a)S 4799(commun-)S 2612 V 900(ity)S 1056(that)S 1260(would)S 1574(not)S 1754(otherwise)S 2219(pay)S 2416(attention.)S 2901(This)S 3136(seems)S 3443(unlikely.)S 3904(The)S 4113(alleged)S 4468(author)S 4787(was)S 4995(well-)S 2742 V 900(known)S 1243(to)S 1373(personnel)S 1843(at)S 1966(many)S 2254(universities)S 2805(and)S 3007(major)S 3307(companies,)S 3848(and)S 4051(his)S 4225(talents)S 4557(were)S 4813(generally)S 2872 V 900(respected.)S 1408(Had)S 1625(he)S 1762(merely)S 2100(explained)S 2560(the)S 2728(problems)S 3171(or)S 3296(o)S 3351 H (f)show 11 -.5 mul h (f)show 11 R 3418(ered)S 3639(a)S 3721(demonstration)S 4384(to)S 4504(these)S 4763(people,)S 5117(he)S 3002 V 900(would)S 1210(have)S 1451(been)S 1692(listened)S 2069(to)S 2190(with)S 2421(considerable)S 3009(attention.)S 3490(If)S 3597(we)S 3760(consider)S 4167(the)S 4337(immediate)S 4837(response)S 3132 V 900(he)S 1046(obtained)S 1467(in)S 1596(October)S 1991(when)S 2271(he)S 2417(revealed)S 2829(the)S 3006(bug)S 3214(in)S 11 I 3343(ftp)S 11 R 3460(,)S 3531(there)S 3791(appears)S 4166(to)S 4294(be)S 4439(little)S 4684(merit)S 4958(in)S 5086(the)S 3262 V 900(arguments)S 1390(that)S 1588(he)S 1724(did)S 1898(not)S 2072(know)S 2349(how)S 2571(to)S 2690(report)S 2984(a)S 3065(bug)S 3263(or)S 3387(that)S 3585(no)S 3728(one)S 3919(would)S 4227(listen)S 4499(to)S 4618(him.)S 3428 V 1150(In)S 1292(the)S 1478(more)S 1755(general)S 2128(case,)S 2395(this)S 2607(argument)S 3073(is)S 3199(also)S 3428(without)S 3817(merit.)S 4162(Although)S 4630(some)S 4914(system)S 3558 V 900(administrators)S 1589(might)S 1907(have)S 2173(been)S 2439(complacent)S 3003(about)S 3306(the)S 3499(security)S 3905(of)S 4055(their)S 4315(systems)S 4723(before)S 5060(this)S 3688 V 900(incident,)S 1317(personnel)S 1778(at)S 1892(Berkeley,)S 2351(most)S 2602(computer)S 3052(vendors,)S 3463(managers)S 3918(of)S 4045(government)S 4605(computer)S 5055(ins-)S 3818 V 900(tallations,)S 1367(and)S 1560(system)S 1901(admininstrators)S 2620(at)S 2734(major)S 3025(universities)S 3567(and)S 3760(colleges)S 4153(have)S 4393(always)S 4731(been)S 4971(atten-)S 3948 V 900(tive)S 1103(to)S 1227(reports)S 1569(of)S 1698(security)S 2083(problems.)S 2591(Someone)S 3038(wishing)S 3425(to)S 3549(report)S 3848(a)S 3934(problem)S 4338(with)S 4572(the)S 4744(security)S 5129(of)S 4078 V 900(a)S 982(system)S 1322(need)S 1562(not)S 1737(exploit)S 2077(it)S 2173(to)S 2293(report)S 2588(it.)S 2745(It)S 2845(is)S 2952(incumbent)S 3449(on)S 3592(someone)S 4015(concerned)S 4496(about)S 4773(a)S 4854(problem)S 4208 V 900(to)S 1022(report)S 1319(it)S 1417(to)S 1539(a)S 1623(proper)S 1944(authority.)S 2438(\(One)S 2692(does)S 2929(not)S 3107(set)S 3266(\256re)S 3449(to)S 3572(the)S 3743(neighborhood)S 4390(shopping)S 4831(center)S 5134(to)S 4338 V 900(bring)S 1168(attention)S 1589(to)S 1711(a)S 1795(\256re)S 1977(hazard)S 2303(inherent)S 2698(in)S 2820(the)S 2990(parking)S 3360(lot,)S 3540(then)S 3764(try)S 3921(to)S 4042(justify)S 4359(the)S 4528(act)S 4690(by)S 4835(claiming)S 4468 V 900(that)S 1098(the)S 1265(\256remen)S 1633(never)S 1908(listen)S 2180(when)S 2450(anyone)S 2799(calls.\))S 4634 V 1150(It)S 1267(is)S 1391(worth)S 1697(noting)S 2029(that)S 2244(some)S 2526(people)S 2869(have)S 3126(advanced)S 3589(the)S 3774(related)S 4122(argument)S 4587(that)S 4803(bugs)S 5062(and)S 4764 V 900(security)S 1295(\257aws)S 1575(will)S 1795(not)S 1984(get)S 2165(\256xed)S 2432(without)S 2816(drastic)S 3155(measures.)S 3670(The)S 3887(claim)S 4178(is)S 4299(that)S 4511(the)S 4692(people)S 5031(who)S 4894 V 900(break)S 1183(into)S 1396(systems)S 1786(are)S 1959(performing)S 2493(a)S 2582(service)S 2932(by)S 3084(illustrating)S 3604(these)S 3871(problems,)S 4350(and)S 4550(they)S 4781(should)S 5117(be)S 5024 V 900(rewarded.)S 1385(This)S 1633(argument)S 2099(is)S 2224(severely)S 2639(\257awed)S 2982(in)S 3119(several)S 3512(ways.)S 3849(First,)S 4131(it)S 4244(assumes)S 4661(that)S 4877(there)S 5146(is)S 5154 V 900(some)S 1165(compelling)S 1693(need)S 1932(to)S 2051(force)S 2307(users)S 2565(to)S 2684(install)S 2987(security)S 3367(\256xes)S 3608(on)S 3751(their)S 3985(systems,)S 4396(and)S 4588(thus)S 11 I 4806(computer)S 5284 V 900(burglars)S 11 R 1321(are)S 1494(justi\256ed)S 1891(in)S 2018(engaging)S 2461(in)S 2588(``breaking)S 3084(and)S 3283(entering'')S 3755(activities.)S 4254(Taken)S 4568(to)S 4695(extremes,)S 5158(it)S 5414 V 900(suggests)S 1308(that)S 1508(it)S 1606(would)S 1917(be)S 2056(perfectly)S 2480(acceptable)S 2976(to)S 3098(engage)S 3443(in)S 3565(such)S 3802(activities)S 4235(on)S 4381(a)S 4465(continuing)S 4972(basis,)S 5544 V 900(so)S 1038(long)S 1274(as)S 1405(they)S 1634(might)S 1931(expose)S 2274(security)S 2660(\257aws.)S 2992(This)S 3227(completely)S 3754(loses)S 4013(sight)S 4267(of)S 4397(the)S 4570(purpose)S 4956(of)S 5086(the)S 5674 V 900(computers)S 1398(in)S 1525(the)S 1700(\256rst)S 1913(place\320to)S 2380(serve)S 2651(as)S 2783(tools)S 3039(and)S 3238(resources,)S 3719(not)S 3901(as)S 4033(exercises)S 4474(in)S 4601(security.)S 5050(The)S 5804 V 900(same)S 1161(reasoning)S 1623(would)S 1934(imply)S 2228(that)S 2429(vigilantes)S 2893(have)S 3135(the)S 3305(right)S 3549(to)S 3671(attempt)S 4037(to)S 4159(break)S 4436(into)S 4643(the)S 4812(homes)S 5134(in)S 5934 V 900(my)S 1091(neighborhood)S 1751(on)S 1911(a)S 2009(continuing)S 2530(basis)S 2800(to)S 2936(demonstrate)S 3522(that)S 3737(they)S 3976(are)S 4158(susceptible)S 4696(to)S 4833(burglars.)S 6064 V 900(When)S 1207(considered)S 1727(from)S 1986(this)S 2192(perspective,)S 2764(coupled)S 3157(with)S 3399(our)S 3591(working)S 4003(de\256nition)S 4472(of)S 11 I 4609(right)S 11 R 4824(,)S 4897(we)S 5069(can)S 6194 V 900(see)S 1072(that)S 1270(it)S 1365(would)S 1673(be)S 1809(immoral)S 2215(to)S 2334(reward)S 2669(computer)S 3116(burglars)S 3508(and)S 3699(vandals.)S 6360 V 1150(Another)S 1549(\257aw)S 1778(with)S 2014(this)S 2214(argument)S 2668(is)S 2782(that)S 2988(it)S 3091(completely)S 3620(ignores)S 3984(the)S 4159(technical)S 4595(and)S 4794(economic)S 6490 V 900(causes)S 1226(that)S 1432(prevent)S 1801(many)S 2086(sites)S 2323(from)S 2577(upgrading)S 3062(or)S 3193(correcting)S 3676(their)S 3917(software.)S 4394(Not)S 4599(every)S 4881(site)S 5074(has)S 6620 V 900(the)S 1072(resources)S 1522(to)S 1646(install)S 1954(new)S 2174(system)S 2518(software)S 2932(or)S 3061(to)S 3186(correct)S 3527(existing)S 3915(software.)S 4391(At)S 4540(many)S 4823(sites,)S 5086(the)S 6750 V 900(systems)S 1292(are)S 1468(run)S 1658(as)S 1793(turnkey)S 6714 V 9 R 2128(1)S 6750 V 11 R 2217(systems\320employed)S 3153(as)S 3288(tools,)S 3575(and)S 3777(maintained)S 4309(by)S 4463(the)S 4641(vendor.)S 5050(The)S 6860 V 9 Y1 900(3333333333333333)S 6960 V 7 R 1000(1)S 6988 V 9 R 1080(So)S 1210(named)S 1486(because)S 1807(the)S 1953(users)S 2174(expect)S 2445(to)S 2551(purchase)S 2907(the)S 3053(systems,)S 3397(plug)S 3593(them)S 3809(in,)S 3938(``turn)S 4179(the)S 4325(key,'')S 4574(and)S 4740(use)S 7098 V 900(them.)S 1130(This)S 1317(is)S 1404(common)S 1746(in)S 1843(business)S 2175(environments)S 2692(where)S 2939(the)S 3076(employees)S 3488(are)S 3625(using)S 3847(a)S 3914(\256xed)S 4121(set)S 4248(of)S 4350(applications.)S 7920 V EP %%Page: 4 4 BP /slant 0 def /height 1.000000 def 9 R 9 R 850 V 11 R 900(owners)S 1256(and)S 1454(users)S 1719(of)S 1850(these)S 2116(machines)S 2571(simply)S 2913(do)S 3064(not)S 3246(have)S 3493(the)S 3668(ability)S 3991(to)S 4118(correct)S 4461(or)S 4593(maintain)S 5019(their)S 980 V 900(systems)S 1293(independently,)S 1987(and)S 2189(they)S 2422(are)S 2598(unable)S 2934(to)S 3064(a)S 3112 H (f)show 11 -.5 mul h (f)show 11 R 3179(ord)S 3369(custom)S 3731(software)S 4151(support)S 4525(from)S 4782(their)S 5026(ven-)S 1110 V 900(dors.)S 1195(To)S 1362(break)S 1649(into)S 1866(such)S 2112(systems,)S 2534(with)S 2775(or)S 2911(without)S 3293(damage,)S 3706(is)S 3825(to)S 3956(trespass)S 4348(into)S 4565(their)S 4811(places)S 5129(of)S 1240 V 900(business;)S 1339(to)S 1460(do)S 1605(so)S 1737(in)S 1857(a)S 1939(vigilante)S 2358(e)S 2406 H (f)show 11 -.5 mul h (f)show 11 R 2473(ort)S 2629(to)S 2749(somehow)S 3204(force)S 3461(them)S 3715(to)S 3835(upgrade)S 4221(their)S 4456(security)S 4837(structure)S 1370 V 900(is)S 1007(presumptuous)S 1657(and)S 1848(reprehensible.)S 1536 V 1150(A)S 1266(related)S 1600(contention)S 2101(is)S 2212(that)S 2414(the)S 2585(users)S 2847(themselves)S 3372(are)S 3541(somehow)S 4000(responsible)S 4538(for)S 4703(such)S 4942(break-)S 1666 V 900(ins)S 1093(if)S 1224(they)S 1477(are)S 1673(not)S 1878(running)S 2284(the)S 2482(latest)S 2777(security)S 3187(enhancements)S 3870(and)S 4091(corrections.)S 4701(Again,)S 5060(this)S 1796 V 900(assumes)S 1310(that)S 1519(there)S 1781(is)S 1899(some)S 2175(moral)S 2475(or)S 2610(legal)S 2867(responsibility)S 3511(to)S 3641(make)S 3922(such)S 4167(patches,)S 4567(and)S 4769(that)S 4978(every)S 1926 V 900(user)S 1119(has)S 1302(the)S 1472(capability)S 1941(to)S 2063(make)S 2336(such)S 2573(patches.)S 11 I 2998(Computer)S 3474(burglars)S 11 R 3890(break)S 4168(into)S 4376(systems)S 4761(by)S 4907(choice,)S 2056 V 900(not)S 1078(because)S 1460(of)S 1588(the)S 1759(presence)S 2177(or)S 2305(absence)S 2688(of)S 2817(some)S 3087(particular)S 3544(software.)S 4019(A)S 4136(burglary)S 4545(is)S 4657(not)S 4836(justi\256ed,)S 2186 V 900(morally)S 1278(or)S 1405(legally,)S 1768(by)S 1914(an)S 2053(argument)S 2503(that)S 2703(the)S 2872(victim)S 3189(has)S 3370(poor)S 3606(locks)S 3873(and)S 4066(was)S 4271(therefore)S 4699(``asking)S 5093(for)S 2316 V 900(it.'')S 2482 V 1150(A)S 1271(further)S 1610(argument)S 2066(has)S 2254(been)S 2502(made)S 2782(that)S 2990(vendors)S 3380(are)S 3555(responsible)S 4098(for)S 4268(the)S 4445(on-going)S 4885(mainte-)S 2612 V 900(nance)S 1193(of)S 1323(their)S 1563(software,)S 2006(and)S 2203(that)S 2406(such)S 2645(security)S 3030(breaches)S 3449(should)S 3781(immediately)S 4369(require)S 4716(vendors)S 5134(to)S 2742 V 900(issue)S 1159(corrections)S 1684(to)S 1809(their)S 2049(customers,)S 2561(past)S 2777(and)S 2974(present.)S 3390(This)S 3626(is)S 3740(not)S 3921(economically)S 4552(feasible,)S 4960(nor)S 5146(is)S 2872 V 900(it)S 997(technically)S 1512(workable.)S 2014(Many)S 2304(sites)S 2534(customize)S 3013(their)S 3248(software)S 3658(or)S 3783(otherwise)S 4243(run)S 4423(systems)S 4806(incompa-)S 3002 V 900(tible)S 1129(with)S 1358(the)S 1525(latest)S 1790(vendor)S 2127(releases.)S 2566(For)S 2752(a)S 2833(vendor)S 3170(to)S 3289(be)S 3425(able)S 3640(to)S 3759(provide)S 4127(instant)S 4454(response)S 4870(to)S 4990(secu-)S 3132 V 900(rity)S 1091(problems,)S 1566(it)S 1666(would)S 1979(be)S 2120(necessary)S 2582(for)S 2747(each)S 2984(customer)S 3423(to)S 3546(run)S 3729(completely)S 4254(standardized)S 4844(software)S 3262 V 900(and)S 1096(hardware)S 1539(mixes)S 1840(to)S 1964(ensure)S 2287(the)S 2460(correctness)S 2990(of)S 3120(vendor-supplied)S 3872(updates.)S 4307(Not)S 4511(only)S 4746(would)S 5060(this)S 3392 V 900(be)S 1041(considerably)S 1639(less)S 1842(attractive)S 2287(for)S 2452(many)S 2734(customers,)S 3245(but)S 3424(the)S 3596(increased)S 4046(cost)S 4261(of)S 4390(such)S 4628(``instant'')S 5103(\256x)S 3522 V 900(distribution)S 1445(would)S 1756(add)S 1950(to)S 2073(the)S 2244(price)S 2499(of)S 2627(any)S 2822(such)S 3060(system\320increasing)S 3963(the)S 4134(cost)S 4348(borne)S 4634(by)S 4781(the)S 4952(custo-)S 3652 V 900(mer.)S 1170(It)S 1276(is)S 1389(unreasonable)S 2005(to)S 2130(expect)S 2454(the)S 2627(user)S 2848(community)S 3616 V 9 R 3350(2)S 3652 V 11 R 3435(to)S 3561(sacri\256ce)S 3965(\257exibility)S 11 B 4435(and)S 11 R 4654(pay)S 4852(a)S 4940(higher)S 3782 V 900(cost)S 1110(per)S 1282(unit)S 1487(just)S 1680(for)S 1840(faster)S 2115(corrections)S 2634(to)S 2753(the)S 2920(occasional)S 3415(security)S 3795(breach.)S 3948 V 1150(Vendors)S 1555(do)S 1699(bear)S 1920(some)S 2186(responsibility)S 2820(for)S 2981(security,)S 3390(however.)S 3861(They)S 4120(supply)S 4448(a)S 4530(product)S 4899(to)S 5019(their)S 4078 V 900(customers)S 1382(that)S 1584(should)S 1914(meet)S 2163(some)S 2431(minimum)S 2897(expected)S 3321(standards)S 3771(of)S 3898(\256tness.)S 4277(For)S 4466(the)S 4636(average)S 5010(user,)S 4208 V 900(this)S 1101(includes)S 1508(an)S 1652(expectation)S 2198(that)S 2404(the)S 2579(data)S 2802(on)S 2953(the)S 3129(system)S 3477(will)S 3691(be)S 3836(secure.)S 4217(Vendors)S 4630(should)S 4966(there-)S 4338 V 900(fore)S 1109(be)S 1246(sure)S 1462(to)S 1615(test)S 1802(the)S 1970(software)S 2380(with)S 2610(security)S 2991(in)S 3110(mind.)S 3431(Further,)S 3815(the)S 3982(vendors)S 4362(should)S 4689(always)S 5026(edu-)S 4468 V 900(cate)S 1108(their)S 1342(customers)S 1820(about)S 2097(the)S 2264(extent)S 2565(to)S 2684(which)S 2985(they)S 3207(can)S 3392(trust)S 3622(the)S 3790(security)S 4171(of)S 4296(their)S 4531(systems,)S 4942(and)S 5134(to)S 4598 V 900(understand)S 1414(the)S 1581(support)S 1944(\(if)S 2080(any\))S 2307(the)S 2474(vendor)S 2811(will)S 3016(provide)S 3384(for)S 3544(security-related)S 4257(problems.)S 4858 V 11 B 900(Favor?)S 5024 V 11 R 1150(An)S 1318(oft-quoted)S 1809(comment)S 2252(was)S 2457(that)S 2657(the)S 2826(author)S 3141(of)S 3267(the)S 3436(Internet)S 3811(Worm)S 4126(did)S 4302(us)S 4435(a)S 4518(favor)S 4783(by)S 4928(expos-)S 5154 V 900(ing)S 1080(the)S 1253(security)S 1639(\257aws.)S 1971(A)S 2089(favor)S 2358(is)S 2471(de\256ned)S 2833(as)S 2963(doing)S 3252(someone)S 3680(a)S 3766(kindness.)S 4250(In)S 4379(a)S 4465(sense,)S 4768(the)S 4940(Worm)S 5284 V 900(as)S 1028(constructed)S 1570(was)S 1777(a)S 1862(kindness\320it)S 2456(could)S 2737(have)S 2980(been)S 3223(written)S 3571(to)S 3694(be)S 3834(destructive)S 4352(instead)S 4700(of)S 4828(just)S 5026(con-)S 5414 V 900(tagious.)S 1321(As)S 1485(it)S 1588(was,)S 1827(the)S 2002(worm)S 2299(only)S 2536(exposed)S 2936(some)S 3209(serious)S 3561(security)S 3949(\257aws,)S 4250(and)S 4449(it)S 4552(heightened)S 5074(our)S 5544 V 900(awareness)S 1382(of)S 1507(security)S 1888(concerns.)S 2371(It)S 2473(was)S 2678(in)S 2799(this)S 2994(sense)S 3266(a)S 3349(kindness,)S 3797(although)S 4217(it)S 4314(is)S 4423(not)S 4599(something)S 5093(for)S 5674 V 900(which)S 1202(we)S 1363(should)S 1691(thank)S 1969(its)S 2108(author.)S 2483(The)S 2720(result)S 2998(does)S 3233(not)S 3408(make)S 3679(the)S 3846(activity)S 4209(morally)S 4584(correct;)S 4950(as)S 5074(has)S 5804 V 900(already)S 1265(been)S 1515(explained,)S 2013(if)S 2124(everyone)S 2568(were)S 2823(to)S 2953(write)S 3222(and)S 3424(run)S 3615(such)S 3861(programs,)S 4348(it)S 4455(would)S 4775(clearly)S 5117(be)S 5934 V 900(wrong.)S 6100 V 1150(The)S 1364(complete)S 1811(results)S 2143(of)S 2279(this)S 2484(incident)S 2883(are)S 3060(not)S 3246(yet)S 3425(clear.)S 3742(There)S 4041(have)S 4292(been)S 4543(other)S 4813(break-ins)S 6230 V 900(since)S 1176(the)S 1361(release)S 1714(of)S 1856(the)S 2041(Worm,)S 2400(perhaps)S 2791(inspired)S 3195(by)S 3355(the)S 3539(media)S 3857(coverage)S 4300(of)S 4441(the)S 4625(Worm.)S 4983(More)S 6360 V 900(attempts)S 1311(may)S 1538(yet)S 1710(be)S 1851(made.)S 2187(Some)S 2476(sites)S 2710(on)S 2858(the)S 3030(Internet)S 3408(have)S 3652(restricted)S 4097(access)S 4413(to)S 4538(their)S 4778(machines,)S 6490 V 900(and)S 1093(others)S 1396(may)S 1620(be)S 1758(removed)S 2176(from)S 2424(the)S 2593(network)S 2987(\(or)S 3149(already)S 3505(have)S 3746(been\).)S 4084(Combined)S 4578(with)S 4808(the)S 4976(many)S 6620 V 900(decades)S 1279(of)S 1404(person-hours)S 2010(devoted)S 2392(to)S 2513(cleaning)S 2919(up)S 3064(after)S 3298(the)S 3467(Worm,)S 3810(this)S 4005(seems)S 4308(to)S 4429(be)S 4567(a)S 4650(high)S 4881(price)S 5134(to)S 6750 V 900(pay)S 1091(for)S 1251(a)S 1332(``favor.'')S 6942 V 9 Y1 900(3333333333333333)S 7042 V 7 R 1000(2)S 7070 V 9 R 1080(Especially)S 1482(the)S 1619(U)S 7 R 1684(NIX)S 9 R 1834(community.)S 7920 V EP %%Page: 5 5 BP /slant 0 def /height 1.000000 def 9 R 9 R 850 V 11 R 1150(The)S 1362(legal)S 1617(consequences)S 2260(of)S 2393(this)S 2595(act)S 2764(are)S 2938(also)S 3157(not)S 3340(yet)S 3516(known.)S 3918(For)S 4113(instance,)S 4543(a)S 4634(bill)S 4825(has)S 5014(been)S 980 V 900(introduced)S 1421(into)S 1645(the)S 1831(House)S 2163(of)S 2305(Representatives,)S 3078(most)S 3344(likely)S 3646(in)S 3783(response)S 4217(to)S 4354(this)S 4565(incident.)S 5031(HR-)S 1110 V 900(5061,)S 1199(entitled)S 1580(``The)S 1873(Computer)S 2364(Virus)S 2659(Eradication)S 3215(Act)S 3424(of)S 3566(1988,'')S 3937(introduced)S 4457(in)S 4594(the)S 4779(House)S 5110(by)S 1240 V 900(Wally)S 1212(Herger)S 1558(\(R-CA\))S 1937(and)S 2139(Robert)S 2482(Carr)S 2720(\(D-MI\),)S 3113(may)S 3345(be)S 3491(only)S 3730(the)S 3907(\256rst)S 4122(in)S 4251(a)S 4342(series)S 4634(of)S 4768(legislative)S 1370 V 900(actions)S 1261(that)S 1476(have)S 1732(the)S 1917(potential)S 2353(to)S 2523(signi\256cantly)S 3119(a)S 3167 H (f)show 11 -.5 mul h (f)show 11 R 3234(ect)S 3412(the)S 3597(computer)S 4062(profession.)S 4631(In)S 4773(particular,)S 1500 V 900(HR-5061)S 1349(is)S 1463(notable)S 1826(since)S 2091(its)S 2236(wording)S 2641(prevents)S 3051(it)S 3152(from)S 3404(being)S 3687(applied)S 4049(to)S 4174(true)S 4383(computer)S 4836(viruses)S 1464 V 9 R 5147(3)S 1500 V 11 R 5192(,)S 1630 V 900(and)S 1091(its)S 1229(provisions)S 1721(might)S 2013(be)S 2150(interpreted)S 2658(in)S 2778(such)S 3013(a)S 3095(way)S 3311(that)S 3510(almost)S 3838(any)S 4030(distributed)S 4535(software)S 4945(would)S 1760 V 900(violate)S 1239(the)S 1413(act.)S 1641(The)S 1851(passage)S 2230(of)S 2360(this)S 2559(bill)S 2746(or)S 2876(similar)S 3221(well-intentioned)S 3980(but)S 4160(misinformed)S 4761(legislation)S 1890 V 900(could)S 1177(have)S 1416(a)S 1497(negative)S 1901(e)S 1949 H (f)show 11 -.5 mul h (f)show 11 R 2016(ect)S 2176(on)S 2319(the)S 2486(computing)S 2990(profession)S 3480(as)S 3604(a)S 3685(whole.)S 2150 V 11 B 900(Conclusions)S 2316 V 11 R 1150(The)S 1355(principal)S 1780(argument)S 2229(made)S 2501(in)S 2622(this)S 2817(paper)S 3095(is)S 3205(that)S 3406(computer)S 3856(break-ins,)S 4327(even)S 4569(when)S 4842(no)S 4988(obvi-)S 2446 V 900(ous)S 1093(damage)S 1473(results,)S 1828(are)S 2000(unethical.)S 2503(This)S 2739(must)S 2994(be)S 3137(the)S 3311(considered)S 3824(conclusion)S 4339(even)S 4584(if)S 4690(the)S 4863(result)S 5146(is)S 2576 V 900(an)S 1046(improvement)S 1675(in)S 1804(security,)S 2222(since)S 2490(the)S 2667(activity)S 3040(itself)S 3303(is)S 3420(disruptive)S 3904(and)S 4106(immoral.)S 4584(The)S 4798(results)S 5129(of)S 2706 V 900(the)S 1069(act)S 1231(should)S 1560(be)S 1698(considered)S 2207(separately)S 2685(from)S 2933(the)S 3102(act)S 3264(itself.)S 3580(This)S 3810(is)S 3918(especially)S 4390(true)S 4594(when)S 4865(we)S 5026(con-)S 2836 V 900(sider)S 1146(how)S 1368(di)S 1454 H (f)show 11 -.5 mul h (\256)show 11 R 1546(cult)S 1744(it)S 1839(is)S 1946(to)S 2065(understand)S 2579(all)S 2722(the)S 2889(e)S 2937 H (f)show 11 -.5 mul h (f)show 11 R 3004(ects)S 3207(resulting)S 3625(from)S 3871(such)S 4105(an)S 4241(act.)S 3002 V 1150(Historically,)S 1732(computer)S 2181(professionals)S 2795(as)S 2921(a)S 3004(group)S 3295(have)S 3536(not)S 3712(been)S 3953(overly)S 4268(concerned)S 4751(with)S 4983(ques-)S 3132 V 900(tions)S 1163(of)S 1302(ethics)S 1606(and)S 1812(propriety.)S 2322(Individuals)S 2864(and)S 3069(some)S 3348(organizations)S 3986(have)S 4239(tried)S 4487(to)S 4620(address)S 4995(these)S 3262 V 900(issues,)S 1233(but)S 1416(they)S 1647(cannot)S 1981(be)S 2126(resolved)S 2539(in)S 2667(any)S 2867(comprehensive)S 3572(way)S 3797(without)S 4177(the)S 4354(participation)S 4952(of)S 5086(the)S 3392 V 900(whole)S 1219(computing)S 1741(community.)S 2354(Too)S 2581(often,)S 2884(we)S 3061(view)S 3324(computers)S 3831(simply)S 4182(as)S 4323(machines)S 4787(and)S 4995(algo-)S 3522 V 900(rithms,)S 1257(and)S 1462(we)S 1636(do)S 1793(not)S 1981(perceive)S 2397(the)S 2578(ethical)S 2917(questions)S 3380(inherent)S 3786(in)S 3919(their)S 4167(use.)S 4421(When)S 4729(we)S 4903(stop)S 5134(to)S 3652 V 900(consider,)S 1343(however,)S 1791(that)S 2000(these)S 2269(machines)S 2727(in\257uence)S 3173(the)S 3351(quality)S 3701(of)S 3836(life)S 4026(of)S 4161(millions)S 4568(of)S 4702(individuals,)S 3782 V 900(both)S 1129(directly)S 1497(and)S 1688(indirectly,)S 2170(we)S 2330(come)S 2600(to)S 2719(understand)S 3233(that)S 3431(there)S 3682(are)S 3847(broader)S 4213(issues.)S 4571(Computers)S 5088(are)S 3912 V 900(used)S 1146(to)S 1277(design,)S 1637(analyze,)S 2043(support,)S 2446(and)S 2649(control)S 3005(applications)S 3581(that)S 3791(protect)S 4140(and)S 4343(guide)S 4632(the)S 4810(lives)S 5062(and)S 4042 V 900(\256nances)S 1302(of)S 1436(people.)S 1832(Our)S 2045(use)S 2234(\(and)S 2471(misuse\))S 2856(of)S 2990(computing)S 3504(systems)S 3896(may)S 4128(have)S 4378(e)S 4426 H (f)show 11 -.5 mul h (f)show 11 R 4493(ects)S 4707(beyond)S 5074(our)S 4172 V 900(wildest)S 1271(imagining.)S 1832(It)S 1952(is)S 2079(with)S 2328(this)S 2541(in)S 2680(mind)S 2960(that)S 3178(we)S 3357(must)S 3624(reconsider)S 4131(our)S 4329(attitudes)S 4754(about)S 5050(acts)S 4302 V 900(demonstrating)S 1562(a)S 1643(lack)S 1858(of)S 1982(respect)S 2324(for)S 2484(the)S 2651(rights)S 2935(and)S 3126(privacy)S 3487(of)S 3611(other)S 3869(people's)S 4273(computers)S 4763(and)S 4954(data.)S 4468 V 1150(We)S 1349(must)S 1612(also)S 1837(consider)S 2256(what)S 2518(our)S 2713(attitudes)S 3135(will)S 3356(be)S 3508(towards)S 3904(future)S 4214(security)S 4610(problems.)S 5129(In)S 4598 V 900(particular,)S 1383(we)S 1546(should)S 1876(consider)S 2283(the)S 2453(e)S 2501 H (f)show 11 -.5 mul h (f)show 11 R 2568(ect)S 2731(of)S 11 B 2858(widely)S 11 R 3200(publishing)S 3702(the)S 3872(source)S 4192(for)S 4354(worms,)S 4716(viruses)S 5062(and)S 4728 V 900(other)S 1169(threats)S 1505(to)S 1635(security.)S 2087(We)S 2282(know)S 2570(there)S 2832(are)S 3008(sites)S 3248(where)S 3558(users)S 3828(will)S 4045(be)S 4193(unable)S 4530(or)S 4666(unwilling)S 5134(to)S 4858 V 900(install)S 1211(updates)S 1587(and)S 1786(corrections.)S 2374(Widespread)S 2937(publication)S 3473(of)S 3605(detailed)S 3993(code)S 4240(will)S 4453(only)S 4690(serve)S 4960(to)S 5086(aid)S 4988 V 900(computer)S 1355(burglars)S 1755(to)S 1882(break)S 2165(into)S 2378(systems)S 2768(such)S 3010(as)S 3142(those.)S 4952 V 9 R 3402(4)S 4988 V 11 R 3488(Publication)S 4031(should)S 4366(serve)S 4638(a)S 4728(useful)S 5038(pur-)S 5118 V 900(pose;)S 1167(endangering)S 1742(the)S 1910(security)S 2291(of)S 2416(other)S 2675(people's)S 3080(machines)S 3528(or)S 3653(attempting)S 4158(to)S 4278(force)S 4535(them)S 4789(into)S 4995(mak-)S 5248 V 900(ing)S 1088(changes)S 1487(they)S 1723(are)S 1902(unable)S 2241(to)S 2375(make)S 2660(or)S 2799(a)S 2847 H (f)show 11 -.5 mul h (f)show 11 R 2914(ord)S 3108(is)S 3230(not)S 3419(ethical.)S 3820(At)S 3978(the)S 4160(same)S 4433(time,)S 4705(we)S 4880(need)S 5134(to)S 5378 V 900(develop)S 1300(a)S 1401(method)S 1784(of)S 1928(rapidly)S 2292(developing)S 2833(and)S 3044(disseminating)S 3709(corrections)S 4247(and)S 4457(enhancements)S 5129(as)S 5508 V 900(they)S 1122(become)S 1495(known.)S 5674 V 1150(Finally,)S 1534(we)S 1704(must)S 1962(decide)S 2290(these)S 2558(issues)S 2864(of)S 2998(ethics)S 3298(as)S 3433(a)S 3525(community)S 4071(of)S 4206(professionals)S 4829(and)S 5031(then)S 5804 V 900(present)S 1257(them)S 1518(to)S 1644(society)S 1995(as)S 2126(a)S 2214(whole.)S 2583(No)S 2757(matter)S 3077(what)S 3330(laws)S 3571(are)S 3743(passed,)S 4103(and)S 4301(no)S 4451(matter)S 4771(how)S 5000(good)S 5934 V 900(security)S 1283(measures)S 1726(might)S 2020(become,)S 2425(they)S 2651(will)S 2860(not)S 3038(be)S 3178(enough)S 3538(for)S 3702(us)S 3837(to)S 3960(have)S 4203(completely)S 4728(secure)S 5043(sys-)S 6064 V 900(tems.)S 1207(We)S 1396(also)S 1611(need)S 1855(to)S 1979(develop)S 2363(and)S 2558(act)S 2722(according)S 3190(to)S 3313(some)S 3582(shared)S 3904(ethical)S 4233(values.)S 4611(The)S 4818(members)S 6194 V 900(of)S 1029(society)S 1378(need)S 1622(to)S 1746(be)S 1887(educated)S 2313(so)S 2449(that)S 2652(they)S 2879(understand)S 3398(the)S 3570(importance)S 4101(of)S 4230(respecting)S 4719(the)S 4892(privacy)S 6324 V 900(and)S 1099(ownership)S 1596(of)S 1727(data.)S 2010(If)S 2122(locks)S 2394(and)S 2592(laws)S 2833(were)S 3084(all)S 3234(that)S 3439(kept)S 3668(people)S 4000(from)S 4253(robbing)S 4635(houses,)S 5002(there)S 6454 V 900(would)S 1212(be)S 1352(many)S 1633(more)S 1895(burglars)S 2291(than)S 2517(there)S 2772(are)S 2942(now;)S 3200(the)S 3372(shared)S 3695(social)S 3989(mores)S 4295(about)S 4577(the)S 4749(sanctity)S 5129(of)S 6564 V 9 Y1 900(3333333333333333)S 6664 V 7 R 1000(3)S 6692 V 9 R 1080(It)S 1163(provides)S 1501(penalties)S 1849(only)S 2037(in)S 2135(cases)S 2353(where)S 9 B 2601(programs)S 9 R 3004(are)S 3142(introduced)S 3555(into)S 3723(computer)S 4091(systems,)S 4427(not)S 4570(sections)S 6802 V 900(of)S 1002(code)S 1199(or)S 1301(subroutines.)S 6902 V 7 R 1000(4)S 6930 V 9 R 1080(To)S 1220(anticipate)S 1610(the)S 1760(oft-used)S 2095(comment)S 2470(that)S 2645(the)S 2795(``bad)S 3025(guys'')S 3295(already)S 3600(have)S 3810(such)S 4015(information:)S 4505(not)S 4660(every)S 7040 V 900(computer)S 1272(burglar)S 1564(knows)S 1831(or)S 1938(will)S 2110(know)S 2342(every)S 2573(system)S 2854(weakness\320unless)S 3545(we)S 3681(provide)S 3987(them)S 4198(with)S 4389(detailed)S 4705(ana-)S 7150 V 900(lyses.)S 7920 V EP %%Page: 6 6 BP /slant 0 def /height 1.000000 def 9 R 9 R 850 V 11 R 900(personal)S 1314(property)S 1728(are)S 1903(a)S 1994(major)S 2293(and)S 2495(important)S 2967(in\257uence)S 3413(in)S 3543(the)S 3721(prevention)S 4234(of)S 4369(burglary.)S 4845(It)S 4956(is)S 5074(our)S 980 V 900(duty)S 1129(as)S 1253(informed)S 1688(professionals)S 2300(to)S 2419(help)S 2641(extend)S 2966(those)S 3231(mores)S 3532(into)S 3737(the)S 3904(computer)S 4351(age.)S 1240 V 11 B 900(Suggested)S 1404(Readings)S 1406 V 11 R 1150(Background)S 1734(information)S 2301(on)S 2459(the)S 11 I 2641(Internet)S 3036(Worm)S 11 R 3352(incident)S 3754(may)S 3991(be)S 4142(found)S 4446(in)S 4581([Seel89].)S 5029( and)S 1536 V 900([Spaf89])S 1354(An)S 1559(introduction)S 2168(to)S 2325(personal)S 2766(and)S 2994(professional)S 3600(ethics)S 3926(can)S 4147(be)S 4320(found)S 4646(in)S 4802([John85].)S 1666 V 900([Tayl75])S 1317( is)S 1459(a)S 1542(good)S 1797(general)S 2153(introduction)S 2726(to)S 2847(various)S 3205(systems)S 3589(of)S 3715(ethics.)S 4067([Winc68])S 4521( relates)S 4874(the)S 5043(phi-)S 1796 V 900(losophy)S 1308(of)S 1457(ethics)S 1771(to)S 1915(the)S 2107(development)S 2732(of)S 2881(personal)S 3310(morals.)S 3728([Lyon84])S 4200( relates)S 4576(ethics)S 4890(to)S 5034(law.)S 1926 V 900(Immanuel)S 1403(Kant's)S 11 I 1753(Foundations)S 2368(of)S 2512(the)S 2704(Metaphysics)S 3310(of)S 3455(Morals)S 11 R 3832(has)S 4037(been)S 4302(translated)S 4787(numerous)S 2056 V 900(times,)S 1200(but)S 1374(is)S 1481(probably)S 1904(not)S 2078(a)S 2159(good)S 2412(reference)S 2848(for)S 3008(any)S 3199(but)S 3373(the)S 3540(most)S 3788(serious)S 4132(inquiries.)S 2222 V 1150(There)S 1449(are)S 1626(many)S 1915(\256ne)S 2125(works)S 2439(relating)S 2820(to)S 2952(computer)S 3412(ethics)S 3714(and)S 3918(professional)S 4500(ethics.)S 4863(I)S 4945(would)S 2352 V 900(recommend)S 1454(the)S 1625(books)S 1925([Ho)S 2095 H (f)show 11 -.5 mul h (f)show 11 R 2162(82],)S 2373([John85],)S 2828( and)S 3056([Mart89])S 3488( as)S 3649(initial)S 3944(references.)S 4488(Other)S 4774(references)S 2482 V 900(worth)S 1189(reading)S 1550(include:)S 1937([Absh81],)S 2412([Absh82],)S 2887([Bloo88],)S 3345( [Chri88],)S 3817([Mitc86],)S 4268( and)S 4492([Weiz86].)S 2648 V 1150(Many)S 1441(works)S 1744(have)S 1985(been)S 2227(published)S 2691(dealing)S 3050(with)S 3282(computer)S 3732(burglars)S 4127(and)S 4321(hackers.)S 4751(Interesting)S 2778 V 900(references)S 1406(include)S 1789([Bair87],)S 2248([Good83],)S 2762( and)S 3013(especially)S 3511([Lee86].)S 3976(The)S 4205(articles)S 4580([Reid86])S 5029( and)S 2908 V 900([Stol88])S 1294( may)S 1549(also)S 1759(provide)S 2127(some)S 2392(insight.)S 3074 V 1150(The)S 1357(social)S 1650(consequences)S 2288(of)S 2416(tampering)S 2898(with)S 3131(computers)S 3625(can)S 3813(be)S 3953(inferred)S 4335(from)S 4585(works)S 4890(such)S 5129(as)S 3204 V 900([Ho)S 1070 H (f)show 11 -.5 mul h (f)show 11 R 1137(86])S 1322( and)S 1552(the)S 1725(continuing)S 2235(feature)S 2576(``Risks)S 2933(to)S 3058(the)S 3231(Public'')S 3624(present)S 3979(in)S 4104(all)S 4253(recent)S 4558(issues)S 4859(of)S 11 I 4988(ACM)S 3334 V 900(SIGSOFT)S 1370(Software)S 1799(Engineering)S 2379(News)S 11 R 2618(.)S 2716(Issues)S 3021(of)S 11 I 3150(ACM)S 3420(SIGCAS)S 3824(Computers)S 4345(and)S 4548(Society)S 11 R 4902(usually)S 3464 V 900(contain)S 1256(interesting)S 1753(articles)S 2102(about)S 2379(the)S 2546(e)S 2594 H (f)show 11 -.5 mul h (f)show 11 R 2661(ects)S 2864(of)S 2988(computers)S 3478(on)S 3621(society,)S 3993(too.)S 3630 V 1150(I)S 1221(believe)S 11 B 1572(everyone)S 11 R 2026(involved)S 2446(with)S 2677(computer)S 3127(systems,)S 3540(especially)S 4014(individuals)S 4540(concerned)S 5024(with)S 3760 V 900(issues)S 1196(of)S 1320(trust)S 1549(and)S 1740(security,)S 2148(should)S 2475(read)S 2695([Thom84].)S 4020 V 11 B 900(References)S 4222 V 11 R 900(Absh81.)S 4352 V 1150(Abshire,)S 1591(Gary)S 1875(M.,)S 2096(``Ethics)S 2510(Apply)S 2852(to)S 3005(Computer)S 3512(Specialists,)S 4078(Too,'')S 11 I 4422(C)S 9 I 4496(OMPUTERS)S 11 I 5028(A)S 9 I 5095(ND)S 4482 V 11 I 1150(S)S 9 I 1205(OCIETY)S 11 R 1515(,)S 1576(vol.)S 1778(11,)S 1949(no.)S 2120(2,)S 2236(p.)S 2352(22,)S 2523(University)S 3020(of)S 3144(Wisconsin,)S 3669(Madison,)S 4115(Wisconsin,)S 4640(Spring)S 4967(1981.)S 4648 V 900(Absh82.)S 4778 V 1150(Abshire,)S 1563(Gary)S 1819(M.,)S 2011(``The)S 2291(ethical)S 2621(insensitivity)S 3199(of)S 3328(computer)S 3780(specialists)S 4270(and)S 4466(what)S 4717(you)S 4920(can)S 5110(do)S 4908 V 1150(about)S 1434(it,'')S 11 I 1636(C)S 9 I 1710(OMPUTERS)S 11 I 2215(A)S 9 I 2282(ND)S 11 I 2447(S)S 9 I 2502(OCIETY)S 11 R 2812(,)S 2880(vol.)S 3089(12,)S 3267(pp.)S 3445(10-11,)S 3769(ACM)S 4060(Special)S 4423(Interest)S 4791(Group)S 5110(on)S 5038 V 1150(Computers)S 1666(and)S 1857(Society,)S 2248(Winter)S 2585(1982.)S 5204 V 900(Bair87.)S 5334 V 1150(Baird,)S 1471(Bruce)S 1781(J.,)S 1929(Lindsay)S 2332(L.)S 2476(Baird)S 2769(Jr.,)S 2953(and)S 3160(Ronald)S 3528(P.)S 3668(Ranauro,)S 4117(``The)S 4409(Moral)S 4727(Cracker?,'')S 5464 V 11 I 1150(C)S 9 I 1224(OMPUTERS)S 11 I 1722(A)S 9 I 1789(ND)S 11 I 1947(S)S 9 I 2002(ECURITY)S 11 R 2367(,)S 2428(vol.)S 2630(6,)S 2746(no.)S 2917(6,)S 3033(pp.)S 3204(471-478,)S 3631(North-Holland,)S 4338(December)S 4819(1987.)S 5630 V 900(Bloo88.)S 5760 V 1150(Bloombecker,)S 1808(J.)S 1918(J.)S 2028(Buck,)S 2327(``Computer)S 2879(Ethics)S 3194(for)S 3361(Cynics,'')S 11 I 3807(C)S 9 I 3881(OMPUTERS)S 11 I 4386(A)S 9 I 4453(ND)S 11 I 4618(S)S 9 I 4673(OCIETY)S 11 R 4983(,)S 5051(vol.)S 5890 V 1150(18,)S 1327(no.)S 1504(3,)S 1626(pp.)S 1803(30-32,)S 2126(ACM)S 2416(Special)S 2778(Interest)S 3144(Group)S 3462(on)S 3610(Computers)S 4131(and)S 4327(Society,)S 4723(New)S 4967(York,)S 6020 V 1150(NY,)S 1369(July)S 1586(1988.)S 6186 V 900(Chri88.)S 6316 V 1150(Christiansen,)S 1780(Donald,)S 2184(``A)S 2388(Matter)S 2733(Of)S 2901(Ethics,'')S 11 I 3329(I)S 9 I 3365(EEE)S 11 I 3583(S)S 9 I 3638(PECTRUM)S 11 R 4053(,)S 4134(vol.)S 4356(25,)S 4547(p.)S 4683(15,)S 4874(August,)S 6446 V 1150(1988.)S 6612 V 900(Good83.)S 6742 V 1150(Goodfellow,)S 1737(Geo)S 1919 H (f)show 11 -.5 mul h (f)show 11 R 1986(rey)S 2160(S.,)S 2313(``Testimony)S 2891(by)S 3036(Geo)S 3218 H (f)show 11 -.5 mul h (f)show 11 R 3285(rey)S 3459(S.)S 3584(Goodfellow,'')S 11 I 4243(S)S 9 I 4298(OFTWARE)S 11 I 4743(E)S 9 I 4810(NGINEER-)S 6872 V 1150(ING)S 11 I 1338(N)S 9 I 1412(OTES)S 11 R 1627(,)S 1688(vol.)S 1890(8,)S 2006(pp.)S 2177(18-23,)S 2494(1983.)S 7038 V 900(Ho)S 1034 H (f)show 11 -.5 mul h (f)show 11 R 1101(86.)S 7168 V 1150(Ho)S 1284 H (f)show 11 -.5 mul h (f)show 11 R 1351(man,)S 1624(Lance)S 1946(J.)S 2073(and)S 2287(Lucy)S 2569(M.)S 2752(Moran,)S 3129(``Societal)S 3612(Vulnerability)S 4255(to)S 4398(Computer)S 4895(System)S 7298 V 1150(Failures,'')S 11 I 1656(C)S 9 I 1730(OMPUTERS)S 11 I 2247(A)S 9 I 2314(ND)S 11 I 2491(S)S 9 I 2546(ECURITY)S 11 R 2911(,)S 2991(vol.)S 3212(5,)S 3347(no.)S 3537(3,)S 3672(Elsevier)S 4082(Science)S 4473(Publishers)S 4983(B.V.,)S 7920 V EP %%Page: 7 7 BP /slant 0 def /height 1.000000 def 11 R 11 R 850 V 1150(North-Holland,)S 1857(1986.)S 1016 V 900(Ho)S 1034 H (f)show 11 -.5 mul h (f)show 11 R 1101(82.)S 1146 V 1150(Ho)S 1284 H (f)show 11 -.5 mul h (f)show 11 R 1351(man,)S 1619(W.)S 1801(Michael)S 2211(and)S 2420(Jennifer)S 2824(Mills)S 3110(Moore)S 3454(\(eds.\),)S 11 I 3780(Ethics)S 4107(and)S 4324(the)S 4510(Management)S 5134(of)S 1276 V 1150(Computer)S 1623(Technology,)S 11 R 2196(Oelgeschlager,)S 2882(Gunn)S 3159(&)S 3278(Hain,)S 3552(Cambridge,)S 4101(Mass.,)S 4422(1982.)S 1442 V 900(John85.)S 1572 V 1150(Johnson,)S 1596(Deborah)S 2029(G.)S 2193(and)S 2408(John)S 2673(W.)S 2861(Snapper,)S 11 I 3305(Ethical)S 3680(Issues)S 4005(in)S 4148(the)S 4339(Use)S 4566(of)S 4709(Computers,)S 1702 V 11 R 1150(Wadsworth)S 1688(Publishing)S 2194(Co.,)S 2412(Belmont,)S 2853(CA,)S 3067(1985.)S 3381(out)S 3555(of)S 3679(print)S 1868 V 900(Lee86.Lee,)S 1434(John)S 1684(A.)S 1833(N.,)S 2010(Gerald)S 2349(Segal,)S 2664(and)S 2865(Rosalie)S 3238(Steier,)S 3565(``Positive)S 4036(Alternatives:)S 4646(A)S 4768(Report)S 5110(on)S 1998 V 1150(an)S 1287(ACM)S 1572(Panel)S 1850(on)S 1994(Hacking,'')S 11 I 2499(C)S 9 I 2573(OMMUNICATIONS)S 11 I 3342(O)S 9 I 3421(F)S 11 I 3510(T)S 9 I 3572(HE)S 11 I 3726(A)S 9 I 3793(CM)S 11 R 3928(,)S 3990(vol.)S 4193(29,)S 4365(no.)S 4537(4,)S 4654(pp.)S 4826(297-299,)S 2128 V 1150(ACM,)S 1462(New)S 1701(York,)S 1987(NY,)S 2206(April,)S 2499(1986.)S 2294 V 900(Lyon84.)S 2424 V 1150(Lyons,)S 1507(David,)S 1857(in)S 11 I 1997(E)S 9 I 2064(THICS)S 11 I 2368(A)S 9 I 2435(ND)S 11 I 2614(T)S 9 I 2676(HE)S 11 I 2851(R)S 9 I 2918(ULE)S 11 I 3143(O)S 9 I 3222(F)S 11 I 3332(L)S 9 I 3394(AW)S 11 R 3524(,)S 3607(Cambridge)S 4150(University)S 4669(Press,)S 4984(Bath,)S 2554 V 1150(Great)S 1425(Britain,)S 1792(1984.)S 2720 V 900(Mart89.)S 2850 V 1150(Martin,)S 1530(Mike)S 1815(W.)S 1999(and)S 2210(Roland)S 2581(Schinzinger,)S 11 I 3186(Ethics)S 3514(in)S 3653(Engineering,)S 11 R 4277(McGraw)S 4718(Hill,)S 4972(1989.)S 2980 V 1150(2nd.)S 1376(Edition)S 3146 V 900(Mitc86.)S 3276 V 1150(Mitcham,)S 1608(Carl,)S 1858(``Computers:)S 2477(From)S 2749(Ethos)S 3033(and)S 3224(Ethics)S 3532(to)S 3651(Mythos)S 4021(and)S 4212(Religion,)S 4653(Notes)S 4942(on)S 5086(the)S 3406 V 1150(New)S 1395(Frontier)S 1788(Between)S 2210(Computers)S 2732(and)S 2929(Philosophy,'')S 11 I 3565(T)S 9 I 3627(ECHNOLOGY)S 11 I 4201(I)S 9 I 4237(N)S 11 I 4336(S)S 9 I 4391(OCIETY)S 11 I 4701(,)S 4768(A)S 9 I 4835(N)S 11 I 4934(I)S 9 I 4970(NTER-)S 3536 V 1150(NATIONAL)S 11 I 1608(J)S 9 I 1656(OURNAL)S 11 R 2006(,)S 2067(vol.)S 2269(8,)S 2385(no.)S 2556(3,)S 2672(Pergamon)S 3150(Press,)S 3443(New)S 3682(York,)S 3968(1986.)S 3702 V 900(Reid86.)S 3832 V 1150(Reid,)S 1436(Brian,)S 1758(``Lessons)S 2234(from)S 2497(the)S 2681(UNIX)S 3004(Breakins)S 3444(at)S 3573(Stanford,'')S 11 I 4102(S)S 9 I 4157(OFTWARE)S 11 I 4618(E)S 9 I 4685(NGINEERING)S 3962 V 11 I 1150(N)S 9 I 1224(OTES)S 11 R 1439(,)S 1500(vol.)S 1702(11,)S 1873(no.)S 2044(5,)S 2160(pp.)S 2331(29-35,)S 2648(ACM,)S 2960(October)S 3345(1986.)S 4128 V 900(Seel89.)S 4258 V 1150(Seeley,)S 1509(Donn,)S 1820(``A)S 2010(Tour)S 2262(of)S 2392(the)S 2565(Worm,'')S 11 I 2985(P)S 9 I 3052(ROCEEDINGS)S 11 I 3647(O)S 9 I 3726(F)S 11 I 3821(1989)S 4081(W)S 9 I 4172(INTER)S 11 I 4462(U)S 9 I 4541(SENIX)S 11 I 4826(C)S 9 I 4900(ONFER-)S 4388 V 1150(ENCE)S 11 R 1380(,)S 1441(Usenix)S 1785(Association,)S 2365(San)S 2563(Diego,)S 2892(CA,)S 3106(February)S 3534(1989.)S 4554 V 900(Spaf89.)S 4684 V 1150(Spa)S 1315 H (f)show 11 -.5 mul h (f)show 11 R 1382(ord,)S 1590(Eugene)S 1952(H.,)S 2121(``The)S 2397(Internet)S 2771(Worm)S 3085(Program:)S 3528(An)S 3697(Analysis,'')S 11 I 4217(C)S 9 I 4291(OMPUTER)S 11 I 4746(C)S 9 I 4820(OMMUNI-)S 4814 V 1150(CATION)S 11 I 1507(R)S 9 I 1574(EVIEW)S 11 R 1844(,)S 1909(vol.)S 2115(19,)S 2290(no.)S 2464(1,)S 2583(ACM)S 2870(SIGCOM,)S 3362(January)S 3738(1989.)S 4055(Also)S 4299(issued)S 4610(as)S 4737(Purdue)S 5084(CS)S 4944 V 1150(technical)S 1578(report)S 1872(TR-CSD-823)S 5110 V 900(Stol88.)S 5240 V 1150(Stoll,)S 1425(Cli)S 1561 H (f)show 11 -.5 mul h (f)show 11 R 1628(ord,)S 1839(``Stalking)S 2316(the)S 2487(Wily)S 2744(Hacker,'')S 11 I 3195(C)S 9 I 3269(OMMUNICATIONS)S 11 I 4041(O)S 9 I 4120(F)S 11 I 4212(T)S 9 I 4274(HE)S 11 I 4431(A)S 9 I 4498(CM)S 11 R 4633(,)S 4699(vol.)S 4906(31,)S 5082(no.)S 5370 V 1150(5,)S 1266(pp.)S 1437(484-497,)S 1864(ACM,)S 2176(New)S 2415(York,)S 2701(NY,)S 2920(May)S 3154(1988.)S 5536 V 900(Tayl75.)S 5666 V 1150(Taylor,)S 1510(Paul)S 1746(W.,)S 11 I 1945(Principles)S 2437(of)S 2563(Ethics,)S 11 R 2906(Dickenson)S 3415(Publishing)S 3928(Company,)S 4424(Inc.,)S 4659(Encino,)S 5039(CA,)S 5796 V 1150(1975.)S 5962 V 900(Thom84.)S 6092 V 1150(Thompson,)S 1694(Ken,)S 1949(``Re\257ections)S 2561(on)S 2716(Trusting)S 3134(Trust,'')S 11 I 3512(C)S 9 I 3586(OMMUNICATIONS)S 11 I 4367(O)S 9 I 4446(F)S 11 I 4547(T)S 9 I 4609(HE)S 11 I 4775(A)S 9 I 4842(CM)S 11 R 4977(,)S 5051(vol.)S 6222 V 1150(27,)S 1321(no.)S 1492(8,)S 1608(pp.)S 1779(761-763,)S 2206(ACM,)S 2518(New)S 2757(York,)S 3043(NY,)S 3262(August)S 3613(1984.)S 6388 V 900(Weiz86.)S 6518 V 1150(Weizenbaum,)S 1795(Joseph,)S 2162(``Not)S 2439(Without)S 2840(Us,'')S 11 I 3102(A)S 9 I 3169(CM)S 11 I 3344(S)S 9 I 3399(IGCAS)S 11 I 3654(:)S 3731(C)S 9 I 3805(OMPUTERS)S 11 I 4311(&)S 4438(S)S 9 I 4493(OCIETY)S 11 R 4803(,)S 4872(vol.)S 5082(16,)S 6648 V 1150(no.)S 1377(2,3,)S 1631(pp.)S 1857(2-7,)S 2119(Association)S 2726(for)S 2941(Computing)S 3526(Machinery,)S 4116(Inc.,)S 4399(New)S 4693(York,)S 5034(NY,)S 6778 V 1150(Summer/Fall)S 1759(1986.)S 6944 V 900(Winc68.)S 7074 V 1150(Winch,)S 1503(Peter,)S 11 I 1789(Moral)S 2097(Integrity)S 11 R 2475(,)S 2536(Oxford,)S 2913(England,)S 3340(1968.)S 7920 V EP %%Page: 8 8 BP /slant 0 def /height 1.000000 def 11 R 11 R 7920 V EP %%Trailer %%DocumentFonts: Courier Times-Roman Times-Bold Times-Italic Troff %%Pages: 8