The program's author was indeed a student at see the wikipedia article
that was discovered by the sysadmin of the neighbour node in Braunschweig by
log analysis.
For earn, there was a helping hand, the well known author of LISTSERV rapidly wrote a spool filter
removing all copies that came through the central sites in Europe. there was no network shutdown on
the academic network, with 500 institutions and almost '4000 NJE nodes.
On the VNET side things were different since peoplehad much bigger NAMES files.
the worm went to ibm's vnet through the us gateway whivj operated at the NJE/RSCS level daback ily
wave from the east code to the west code and (as I was told).
At the end of 1991 there was another or better two half gateways between EARN and IBM operated near
Paris, on the Earn site it uses andy hooper's gateway to talk to profs using x.400 as connection
protocol. two elephants back to back dancing.
PeterSylvester
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
