Copy Link
Add to Bookmark
Report
Cris Vol 1 Issue 01
-----BEGIN PGP SIGNED MESSAGE-----
Atrical Written By:
Michael Paris (Cris)
Edited By: Joy (Cris Staff)
How Did Cris Start, Where Is It Going?
The story
From The Beginning
Cris hatched out of a virus concept, I, The sysop of the Cris BBS first
started running a bbs in 1989. This was a shareware bbs running on
an XT 8088 machine with a 65 meg hard disk. I still remember the fear
that I had for virus from back then.
I remember one day a user logged on and posted an ad requesting viruses,
he came about this in a nice way, and explained that these viruses he
got would be used for research reasons only, they would not be given to
anyone, and they would be used ONLY on a machine set aside for this reason.
It took me about two minutes to take his account off the bbs and delete his
message. This fear was in me for these things. I remember thinking back of
telling one of my friends when the topic of scanning for virus came up,
that if I ever came up with one, I would never trust a scanner to clean it,
but would format my hard disk! Even then I was not sure if this would be
enough, I might need to buy a new computer.
This fear that some (not all) AV people put in our minds is still out there.
(The Michael Angelo virus was a good example of that.)
In 1991 I was over at a fellow sysops home, he had a small collection
of viruses, and unzipped one into a directory, I stood there with amazement
as he scanned with the latest version of scan. His computer did not blow up!,
it detected the virus, then he ran the clean, and the virus was gone! I was
amazed that he could do this on his computer (unzip a virus) and not trash
one thing. That night I took those viruses home with me.
I began testing them, ie: unzipping and running them on my computer. They did
not damage my computer. It began to be fun to see what they could do, and
see if i could contain them from my other files, once in awhile one would
infect one of my dos files or some other file in the computer, but i would
just delete, clean or replace it! No harm done! (read a research guide before
doing this yourself).
I began to advertize for viruses :), I became bored with the ones I had
and wanted to see what was out there. I started experimenting with trojans,
memory resident files and some stealth files. It took a long time before
I began to meet people where I could get the ready access to them, but there
was enough around that it kept me busy. Groups that I always heard of seemed
far away, I could only dream of coming into contact with NUkE, Phalcon/Sk,
or other groups around then.
I had an area on the BBS where I had virus files, but this was like the
normal viruses I had, to that point in time. three hundred files at the most.
Then one day I heard that the group nuke was local here in the Chicago area,
and at about the same time I saw a bbs ad on advertizing nukenet. I called
the number on the advertizement and applied for the access. It was about
two days latter I heard back from them. It seems that i did this at the
right time, the chicago board was not able to connect to their hub to get
their mail from Canada or the US.
I was offered to hub the net for Nuke so Nowhere man, one of the main
programmers for nuke (for those that do not know) could get his mail.
I jumped at the opportunity! So here I was, Green to all of the politics,
not knowing what was really going on in either world, reading the nuke
administration bases, seeing how they worked, what they were doing from the
inside out. Also at this time I started talking to people allot on the phone,
ie (big bills), calling Nuke members and others voice really opened my eyes
as to what was going on in the AV & VX worlds. If those people gave out
diplomas I would have graduated with flying colors, and the phone bills I
got would have paid my way through collage.
The politics in the group really made me grow weary of what was going on.
There was allot of things going on in the group that was not legal, there
were people in there that were trying to fix it, but for the most part in
the end it seemed to be something that could not be fixed. I began to tell
these people that I was leaning more toward the AV side and views on things.
They thought this was ok, as long as I did not cross certain boarders.
like for example, talking to caro members, the whole idea here was to get
in to it a little bit, but not all the way. In time I was told that AV
people could not be trusted, and to stay away from them. They were all liars
and deceivers. "They are going to stick it up your ass"!
Well I will never tell anyone that, but there are people in any group
that are like that. I am always watching my back (from both sides).
To make this long story a little shorter, I started talking to people like
Sara Gorden. (this person is great for not really taking a side in a
conversation) She just told me straight out what was going on in her eyes,
well this helped allot to see more of what was going on, and believe me I have
spent many hours thinking this thing out.
It was not long before I began to see that this situation had no resting
place, there was no middle ground, it was either black or white. you are
either AV or VX! This might be why so many people were so confused for so
long. Also this added more fire to both sides, now their are spies, moles,
etc. when you are on an AV board you are AV and when you are on a VX board
you are VX.
So it is true, there is not really a term `VX' for the nuke type groups,
but who am I to change that, this is their war, not mine. But anyone can see
that allot of the AV out there do VX (Virus Exchange), but this is only among
themselves. But the fact is still there, allot do vx and sometimes the files
get around to the nasty part of this VXing realm, No one is perfect, sooner
or latter down the thread the files that the `AV' share will end up in the
hands of the ones that they shun and send away. Yes I also have files with
AV authors signatures in them also.
So some Av are Vx'ers, funny when you see this. Well this is the way I have
seen it, This all comes down to an individual thing. Some of the people in
the VX world (as we know it) are not bad people, they do not do damage to
peoples machines nor do they like to see it done. But these same people want
to exercise their right to have and hold their virus collection, or play
with their viruses in the privacy of their own home. Tell me that there are
no AV people out there that have fun playing with viruses. There are many
I am sure that enjoy tracing a file through memory, and just the plain old
challenge of beating it.
So why should we deny someone else of this `fun'? What gives one person
the right to tell another that I can have this and play with it but you
cannot! This reminds me of a selfish kid wanting to have all of the toys to
himself. There are other things coming into play here, there is an ELITE
group here called AV, they only exchange among their circles. In other words
one AV `Click' will share around themselves, while another will not. It is a
hard life to live (this AV thing), if you want to test viruses you either
get them from your friends in the AV, or from a mole, or a VX board out
there.
I have heard several AV talk about the other AV person, saying "oh that
person, I would never give him a virus". but this is a friend, echoing in
the same AV nets, doing the same research, but not in that personal
pedicular `Click'. This is a shame if you ask me. But what this all comes
down to is the fact that there are people all over that want to research,
collect, play, etc... If these people cannot fit into a click somewhere,
they will more than likely end up on a (termed) VX bbs somewhere. Is this
where they belong? (I do not think so)
Now there are some misconceptions that I have seen, AV people have rumored
what VX boards are like.
Some AV Mis-Conceptions about (termed) VX Boards
1. ALL VX boards are boards where all the users use handles (alias
names).
2. ALL of the VX'ers are people that are looking to destroy your
data or crash your computer.
3. ALL VX'ers are doing things against the law, ie Hacking,
Phreaking, Carding, PBX'ing, Making Bombs or teaching people
to do so, the list goes on.
Yes, it is true that allot of these boards are promoting such things, but
Cris does see that not all on these boards are into illegal things like the
above, but the AV as we know it today must share some of the blame for
what is going on in there. Yes, for every person that they did not
welcome into their `click' that went their way into the VX scene. now
these people are going the only other way that is left, if they want
to have these files for themselves.
There are some in the VX world of things now that DO NOT want to do
damage to anyone's machine, they will not even give a virus to someone
that says that they will. Allot of these people change after a while into
a full pleaded nuk'em type person after a while. My grandmother used to
say, "if you play with poo poo, your going to stink", and this is what
happens, someone with morals hangs around long enough, they will loose
these morals after a while.
So after seeing all of this, I and others that saw the same thing, started
A group called Cris. (Computer Research and Information Service).
Cris sees this middle ground very clear. We are very AV, or AVvX, if you
will. Here are some short Cris definitions of the way cris sees the
politics of the thing.
The problem here is that there are allot of VX people that do not fit
into this AV `Click' but still have the "proper ethics". They have no
intention of doing any damage or giving the files to people who do. They
are VX, because they exchange viruses (just as the AV do), but they are
people with "proper ethics" (AVvX)
AV'ers = Someone that is against viruses doing damage to someone's
machine, against anyone that would attempt to bring about
this act, against anyone that would help aid a person in this
act. Someone that will assist others in the prevention of
this act (ie: AV software).
AVvX'ers = All of the above + Will virus exchange with any interested
person that is to be trusted (in their eyes), AV authors,
programmers, researchers, collectors. But not clear cases of
un-ethical people.
VX'ers = None of the above. Their work is to undermine AV research and
programming, they will assist people attempting to damage
systems, no ethics apply here. Not all but many of these
users are hackers/phreakers/carders, most of this group has
no respect for the law and tend to have an `underground' way
of thinking.
Remember, Virus exchange is not against the law (YET), AV'ers and
AVvX'ers do not want to see this happen, very few in the av group want
to see this happen, most of them are taking a stand against it. (we'll
know more on this after the upcoming hearings...) Only a select few are
pushing for it. we see these as AV_CONFUSED!
AV_Confused = Those individuals in the AV community who want to make it
illegal to own and exchange viruses (or virus code),
UNLESS you are an "approved researcher".
The questions that remain unanswered are: Approved by who? What criteria
would one have to meet? As long as viruses are clearly labeled as such,
who has the right to tell anyone (in a democratic society) what kind of
code they may, or may not, keep on their own personal computer? The only
thing that will happen if viruses are made illegal is that the VX community
will go deeper underground. The above are the reasons why we call the
individuals that want to see viruses made illegal AV_CONFUSED, we fail to
see the benefits of their plan. All we see is people wanting the Government
to tell us what we may or may not possess on our personal computers. This
sets a dangerous precedent.
Cris has gone through allot of changes, Growing into what it is today.
We have not finished yet, we are still growing. If you see an area that
we need to grow in be sure to let us know. You will not be shunned or turned
away, we are always looking to grow, and come closer to some truth or idea.
Here are some of the changes that have taken place.
Access used to be allot easier then what it is now. It seemed that we
started a little naive. Anyone that logged on the board and filled out
a research application that looked ok we gave access to viruses right
away. Now this has changed. It seemed that users were filling out research
apps to get the viruses, Not really caring about research work. they just
wanted to download. Now if someone fills out a research application, they
will be assigned one virus to research at a time, until they become
regular with the work.
So for the most, things are changing, as we run into problems, always someone
looking for a way to get something for nothing, weather it is free files
without uploading, special privileges for being a research member, and doing
no work, etc. We try to be more then fair with everyone, but there comes a
time to smarten up, we do not take advantage of anyone and we feel that
others should not try to do it here.
We have made it easier on collectors and people that just want to Collect.
Before we neglected this area, we saw the research desire here, and neglected
to see the honest collector that fit into this AVvX concept, so we have added
it into the bbs. After being an `approved' collector, ie someone that is
clearly a virus collector, can prove it, and someone that (in our eyes) is
not a malicious person that will use the files in the wrong way, he will have
access to a ratio of upload/download for virus files.
Crisnet has grown quite a bit also, this started as vinenet from the old Vine
bbs, it was basically a warez net, with allot of boards echoing from around the
USA and Canada, this net and the board were a jumping place, servicing allot
of users, never enough time for all to do what they wanted, when the bbs and
the net went to the AV concept we lost 80% of the net and users. But now in
return we have been paid back with allot of new users and connections, AV
people from all over the world have connected to this mail echo crisnet. You
will find nodes from Africa (most of these with the AVvX concept), and AV
nodes in Germany, Malta, Canada, and all over the USA, this is growing like
wildfire.
So Where Is Cris Going, And What Are Our Future Goals
Cris is taking this "New Trend" in AVvX, all the way. We will stay out of
the AV and VX world of confusion, mistrust, and politics. We will stick with
our AVvX concept as long as the `AV' continues in the way it is going. Some
day who knows maybe they will open up into this trusting scene and open
their minds to some of the normal every day people out there that want to
get involved and exercise their right to have any code they want on their own
computer, (as long as these are ethical people).
Cris will continue putting out the Crisnews newsletter, We also have plans
in the working of coming out with some AV products ourselves. One will be a
complete anti-virus package, we will first start with a simple scanner
though we have allot of ideas and feel that we will forge ahead and get
these things done in a reasonable amount of time.
We plan to give the crisnet to any bbs in the world that wants it. there are
message areas in there now for both the AV, AVvX, and VX posting. Some
handles are aloud (special cases) of virus programmers, sometimes AV
researchers like to ask these virus programmers some questions and trying
to find them with their real names could be a problem, so we allow KNOWN
Virus programmers in the net with their aliases. Although we personally know
the people, and have their real info, in the net this would serve them best
to be who they have been, and go by the names that the world recognizes them
as. Crisnet will continue to be an open forum to all alike. It will not
matter what world you are coming from, you will have the right to express
your view in a moderated forum. If anyone gets carried away (has not yet
happened) the node will be removed from the echo.
Well for the most part this has been something hard to write. trying to cover
all of the areas you might be wondering about is a task. If you have any
other questions they might be better answered via netmail, you can get
in touch with Cris in the following ways.
Netmail 1:115/863, Crisnet 77:708/0, or log on the bbs at 708-863-5285
you may fill out some on-line questioners, or download from the file area
crisnet/info. magic words for freq-ing are as follows: filelist, nodelist,
cris, and help. All of these are freqable if you are in the fidonet or
crisnet nodelist. No virus or virus code can be freqed.
Michael Paris
Cris WHQ
-----BEGIN PGP SIGNATURE-----
Version: 2.3a
iQBVAgUBLNc326M4CDusTF+9AQFvFgH/Re58PPw05KqTBlkE5K0Bejz+ZEX4x84E
fKAApeeXNi706+0NLUyYtEt9wAyRzPYx1oDnk7p8RSW3tjw9OHb0/g==
=ZJII
-----END PGP SIGNATURE-----
