Great Circle Associates Firewalls
(November 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Java
From: Bob Lanning <lanning @ tidbit . fhda . edu>
Date: Fri, 3 Nov 1995 01:57:40 -0800 (PST)
To: rcooper @ the-wire . com (Russ Cooper)
Cc: firewalls @ GreatCircle . COM
In-reply-to: <01BAA992 . 77E00780 @ rcooper . the-wire . com> from "Russ Cooper" at Nov 3, 95 02:17:03 am

---- As written by Russ Cooper:
> 
> Would it be possible to embed a virus into a .GIF file? or .AVI file? or 
> .WAV file? These guys are all downloaded and stored in a cache on your 
> local workstation, and in turn invoke an application on the local 
> workstation. What is the difference between this and Java?
> 
> Cheers,
> Russ Cooper
> Senior Internet Integration Engineer
> SHL/Computer Innovations
> RCooper @
 the-wire .
 com - Express @
 msn .
 com - 74323 .
 364 @
 compuserve .
 com
> 
.GIF, .AVI, .WAV... are basically compressed raw data streams.
The "viewer" decompresses the stream and sticks it on your monitor or your
audio device.  JAVA on the other hand is a programming language.  It can
manipulate files watch the mouse/keyboard/network for traffic.

This is simular to the Micro$oft Word Macro trojanhorse.  The document (HTML,
Word) is harmless.  It is when you have attachments that get executed that
thing go wrong.

-- 
Robert Hajime Lanning                                     "It's the FROSTING!"
     The opinions expressed here are not mine, nor are they anyone else's.
lanning @
 tidbit .
 fhda .
 edu <--for fun     &&     for profit--> lanning @
 cup .
 hp .
 com


Follow-Ups:
References:
  • RE: Java
    From: Russ Cooper <rcooper @ the-wire . com>
Indexed By Date Previous: Re: Java
From: Mike Shaver <shaver @ neon . ingenia . com>
Next: Re: mountd Security
From: "W0W! @ # ELYTENESS# @ !" <morph_1 @ netaxs . com>
Indexed By Thread Previous: Re: Java
From: Mike Shaver <shaver @ neon . ingenia . com>
Next: Re: JAVA is the Devil
From: "W0W! @ # ELYTENESS# @ !" <morph_1 @ netaxs . com>

Google
 
Search Internet Search www.greatcircle.com