Re: VIRUS WARNING

[Steven M. Bellovin]

In message <[EMAIL PROTECTED]>, Brant Knudson writes:
>
>I think I'm starting to see a pattern emerging in email viruses.
>
>Melissa:  Uses script to read user's address book to get the email
>addresses of new victims.
>ILOVEYOU: Uses script to read user's address book to get the email
>addresses of new victims.
>
>What method do you think the next email virus is going to use if
>Microsoft doesn't stop scripts from reading people's address books?  Why
>didn't MS plug this hole after Melissa?

Hardly new -- the IBM Christmas Card Virus, in 1987 (yes, before the Morris 
Worm) used the exact same technique.

                --Steve Bellovin