There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
 
Tag Cloud
access audio avg avg 8 bios blue screen boot bsod computer connection cpu crash css dell desktop dma driver drivers dvd email error excel explorer firefox firefox 3 freeze gimp graphics hard drive hardware hijackthis hjt install internet internet explorer itunes keyboard laptop macro malware monitor motherboard network networking outlook outlook 2003 outlook 2007 outlook express pio problem problems router seo server slow sound sp3 spyware trojan usb video virtumonde virus vista vundo windows windows vista windows xp winxp wireless
Tech-Related News
Search
Search in:
 
Advanced Search
Tech Support Guy Forums > General Technology > Tech-Related News >
Solved: Ridiculous


HELLO AND WELCOME! Before you can post your question, you'll have to register -- it's completely free! Click here to join today! We highly recommend that you print a copy of our Guide for New Members. Enjoy!

 
Thread Tools
win2kpro's Avatar
Distinguished Member with 6,646 posts.
 
Join Date: Jul 2005
Location: Southeast
Experience: OEM Builder and Repair
04-Aug-2008, 11:13 AM #1
Solved: Ridiculous
George Ledin teaches students how to write viruses, and it makes computer-security software firms sick.

"In a windowless underground computer lab in California, young men are busy cooking up viruses, spam and other plagues of the computer age. Grant Joy runs a program that surreptitiously records every keystroke on his machine, including user names, passwords, and credit-card numbers. And Thomas Fynan floods a bulletin board with huge messages from fake users. Yet Joy and Fynan aren't hackers—they're students in a computer-security class at Sonoma State University. And their professor, George Ledin, has showed them how to penetrate even the best antivirus software."

http://www.newsweek.com/id/150465?GT1=43002

IMO, and I"m sure some will disagree, Sonoma State University should fire this "professor" today.
__________________
Registered Microsoft® OEM Partner.

4 words a technician doesn't want to hear; "My friend told me"

PLEASE, NO PM's. PLEASE ASK ANY QUESTIONS IN YOUR THREAD. THANK YOU!

I will never understand why people spend a few hundred dollars on a video card or cards, then try to run their machine on a $30 power supply.

Don't be fooled by Power Supply Manufactures numbers. Advertised watts don't mean squat!
CrazyComputerMan's Avatar
Computer Specs
Distinguished Member with 11,213 posts.
 
Join Date: Apr 2007
Location: England, UK :)
Experience: Advanced
04-Aug-2008, 06:59 PM #2
Agreed with Intel's suggestion about firing the professor
dan_mccartney's Avatar
Computer Specs
Senior Member with 319 posts.
 
Join Date: Dec 2007
Location: Idaho Falls, ID
Experience: Little here, little there
05-Aug-2008, 09:03 PM #3
Also agree 100%
briealeida's Avatar
Computer Specs
Senior Member with 585 posts.
 
Join Date: Jun 2007
Location: US and A
Experience: Ninja
07-Aug-2008, 09:37 PM #4
Don't want to start a war but I disagree.

AV software should be constantly changing and improving. If writing a virus that will thwart AV software is so easy and methodical that it can be taught in this way, it is a warning sign!

In the wrong hands, this education is bad. Obviously. But any information in the wrong hands, can be dangerous. These students are better prepared to work for AV companies and help them improve their software. People should know how viruses work. If only malicious users knew how viruses worked, how could we stop them?
__________________
--
Brie Aleida

http://granite.sru.edu/~bag6849/index.html
new tech guy's Avatar
Computer Specs
Distinguished Member with 3,893 posts.
 
Join Date: Mar 2006
Location: NJ
Experience: Intermediate
08-Aug-2008, 12:22 AM #5
Quote:
Originally Posted by briealeida View Post
Don't want to start a war but I disagree.

AV software should be constantly changing and improving. If writing a virus that will thwart AV software is so easy and methodical that it can be taught in this way, it is a warning sign!

In the wrong hands, this education is bad. Obviously. But any information in the wrong hands, can be dangerous. These students are better prepared to work for AV companies and help them improve their software. People should know how viruses work. If only malicious users knew how viruses worked, how could we stop them?
Have to agree with that. Just look at statistics, blackhats who are caught making bigtime hacks like the attack on the TJ Maxx servers are brooded over by security companies and private security workers to work for them in creating network defense systems. This is because they know how the other side works. Therefore know exactly how to shut down those vulnerabilities which is what this person wanted to do in this case. Also, having doing this, the new students now know the insides of the code for the programs and can customly modify them to possibly amplify security.
__________________
-new tech guy
OH MY GOSH THEY KILLED KENNY!
(edited quote from south park to conform with family content rules)

RIP Chopper.....DOB:1/3/2000-DOE: 8/18/08
Chrismichael's Avatar
Computer Specs
Senior Member with 136 posts.
 
Join Date: Jul 2008
Location: Hell Texas Dallas
Experience: Adv. Sound Engineer
08-Aug-2008, 12:33 AM #6
Knowledge is paramount. Denying knowledge is wrong. You can find most if not all the information this man is teaching on the internet. Should we censor the internet also?
win2kpro's Avatar
Distinguished Member with 6,646 posts.
 
Join Date: Jul 2005
Location: Southeast
Experience: OEM Builder and Repair
08-Aug-2008, 03:02 AM #7
Teaching virus writing as a college course has no more place in a curriculum, than teaching students how to build an IED.

Companies that deal with viruses and other malware should be the ones teaching their employees how to recognize and deal with viruses and other malware, just as the military teaches their personnel how to deal with IEDS.

Why would anyone believe that a college student learning to write viruses and other malware would go on to use their knowledge working for a company designing antivirus and other malware software, than a college teaching students to build an IED would go on to use their IED knowledge for military or peaceful purposes?
__________________
Registered Microsoft® OEM Partner.

4 words a technician doesn't want to hear; "My friend told me"

PLEASE, NO PM's. PLEASE ASK ANY QUESTIONS IN YOUR THREAD. THANK YOU!

I will never understand why people spend a few hundred dollars on a video card or cards, then try to run their machine on a $30 power supply.

Don't be fooled by Power Supply Manufactures numbers. Advertised watts don't mean squat!
webaddict's Avatar
Computer Specs
Junior Member with 19 posts.
 
Join Date: Jul 2008
Experience: Beginner
08-Aug-2008, 03:49 AM #8
Quote:
Originally Posted by briealeida View Post
Don't want to start a war but I disagree.

AV software should be constantly changing and improving. If writing a virus that will thwart AV software is so easy and methodical that it can be taught in this way, it is a warning sign!

In the wrong hands, this education is bad. Obviously. But any information in the wrong hands, can be dangerous. These students are better prepared to work for AV companies and help them improve their software. People should know how viruses work. If only malicious users knew how viruses worked, how could we stop them?
Agreed. This highlights the importance of including ethics as part of all subjects. There's no need to deny them the gift of knowledge. Along with knowledge build their character that minimizes the possibility of taking the wrong route to success.
MikeSwim07's Avatar
Computer Specs
Distinguished Member with 4,205 posts.
 
Join Date: Apr 2007
Location: Cleveland, Ohio
Experience: Training at MRU
08-Aug-2008, 04:28 PM #9
Quote:
"You can't really have a defense plan if you don't know what the other guy's offense is," says Lincoln Peters, a former Ledin student who now consults for a government defense agency.
I definitely agree
new tech guy's Avatar
Computer Specs
Distinguished Member with 3,893 posts.
 
Join Date: Mar 2006
Location: NJ
Experience: Intermediate
08-Aug-2008, 05:11 PM #10
Also to win2kpro, what makes u think just because the guy already works at a security software developers company who learned how to work with malware wont reverse engineer that knowledge to make a nasty themself. I think its smart to teach both spectrum's and give the student the choice on what to do with the knowledge. The best way of learning is self teaching. You learn fast when you are forced to decide for yourself then when someone dictates what you should do to you.
__________________
-new tech guy
OH MY GOSH THEY KILLED KENNY!
(edited quote from south park to conform with family content rules)

RIP Chopper.....DOB:1/3/2000-DOE: 8/18/08
tomdkat's Avatar
Computer Specs
Distinguished Member with 3,525 posts.
 
Join Date: May 2006
Location: S.F. Bay Area, CA
Experience: Intermediate
08-Aug-2008, 05:27 PM #11
Interesting article. Since this is taking place in an academic setting, I'm wondering if they are focusing on Windows or "surveying" other OSes as well.

Peace...
win2kpro's Avatar
Distinguished Member with 6,646 posts.
 
Join Date: Jul 2005
Location: Southeast
Experience: OEM Builder and Repair
08-Aug-2008, 06:10 PM #12
I just don't personally believe that an institute of higher education should be teaching students techniques that MAY be utilized for criminal activities (cyber crimes or otherwise).

Just a small example of trying in a small way to prevent criminal activity can be found right here at TSG. In forums, we can no longer provide information for cracking passwords.
While most of the information necessary is available on the net, most criminals without some background of computers may have a difficult time cracking a password. Should TSG freely provide information to assist in possible criminal activity?

From life experience I have the knowledge and know how that I could teach a person with a little mechanical knowledge how they could steal a specific "object" (that will go unnamed), and with an investment of approximately $20,000-$50,000 could sell that "object" within approximately 18 months for $300,000-$1,000,000 with less than a 1% chance of being caught.

Because I have this particular knowledge, should I teach others, and thereby increase the rate of crime in this Country? I think not.

With identity theft and other cyber crime rising at a significant rate, I just don't believe a college professor should be providing this type of knowledge to his students in this particular area, anymore than I should provide information on how to steal a specific "object" and make a tremendous profit at the expense of the public.
__________________
Registered Microsoft® OEM Partner.

4 words a technician doesn't want to hear; "My friend told me"

PLEASE, NO PM's. PLEASE ASK ANY QUESTIONS IN YOUR THREAD. THANK YOU!

I will never understand why people spend a few hundred dollars on a video card or cards, then try to run their machine on a $30 power supply.

Don't be fooled by Power Supply Manufactures numbers. Advertised watts don't mean squat!
JohnWill's Avatar
Computer Specs
Moderator with 77,418 posts.
 
Join Date: Oct 2002
Location: South Eastern PA, USA
Experience: Advanced age & experience
08-Aug-2008, 07:31 PM #13
I have to come down on the side of not teaching this, we have enough people doing that kind of activity already. I'm not buying the part about "the gift of knowledge".
MikeSwim07's Avatar
Computer Specs
Distinguished Member with 4,205 posts.
 
Join Date: Apr 2007
Location: Cleveland, Ohio
Experience: Training at MRU
08-Aug-2008, 07:33 PM #14
In my opinion it's not like these students are going to use this info for bad. They are going to university to study security. They probably will work for some AV company etc where they can use this to possibly improve the avs.
guitar's Avatar
Senior Member with 519 posts.
 
Join Date: Jan 2006
Experience: Intermediate
08-Aug-2008, 07:52 PM #15
this has been going on for years all computer security workers military and business have taken virus/hacking courses
hack into a web page eg bank put something on their front page contact said bank tell them how it was done and get offered a job its been goin on for years and i agree that the course should be held people taking these courses are then accountable for how they use this knowledge or do you all think we should turn a blind eye and not teach this skill to honest law abiding security personel
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are Off
Refbacks are Off

You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 06:56 PM.
Copyright © 1996 - 2008 TechGuy, Inc. All rights reserved.
Powered by vBulletin, Copyright © 2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.1.0
Powered by Cermak Technologies, Inc.