StarDestroyer.Net BBS

Teen Allegedly Confesses to Creating Worm

By CLAUS-PETER TIEMANN
The Associated Press
Tuesday, July 5, 2005; 9:42 AM

VERDEN, Germany -- A German teenager reiterated his confession to creating last year's "Sasser" computer worm as he went on trial Tuesday on computer sabotage and related charges, a court official said.

The trial of Sven Jaschan, 19, was being held behind closed doors in the northwestern town of Verden because he was a minor at the time of the offense. He entered the courthouse through a side door and did not speak to reporters.

After proceedings began, Jaschan "admitted to the alleged offenses in every detail," court spokeswoman Katharina Kruetzfeld said.

Because defendants do not enter formal pleas under German law, proceedings continue despite Jaschan's confession. The trial was to last three days, with a possible verdict on Thursday.

Authorities said Jaschan already confessed to creating the worm at the time of his arrest in May 2004, about a week after the worm hit public hospitals in Hong Kong, a third of Taiwan's post office branches and check-in desks at British Airways.

The charges, which also include disrupting public services and illegally altering data, carry a maximum sentence of five years in prison, though Kruetzfeld said Jaschan, as a minor, faces a lesser penalty.

Jaschan was arrested at his family's home after Microsoft Corp. received a tip from an informant seeking a reward. Exploiting a flaw in the company's Windows 2000 and Windows XP operating systems, the worm had raced around the world and caused some computers to continually crash and reboot.

Unlike most outbreaks, Sasser did not require users to activate it by clicking on an e-mail attachment. Sasser is known as a network worm because it can automatically scan the Internet for computers with the security flaw and send a copy of itself there.

Authorities who questioned Jaschan said they got the impression his motive was to gain fame as a programmer. He was arrested sitting at his computer at the house of his mother, who runs a computer store in the small northern town of Waffensen.

The teenager has told officials his original intention was to create a virus, "Netsky A," that would combat the "Mydoom" and "Bagle" viruses, removing them from infected computers. That led him to develop the Netsky virus further _ and to modify it to create Sasser.

Investigators say he had launched a new version of Sasser that was meant to limit the damage just before his arrest.

In their indictment, prosecutors chose the cases of three German city governments and a public broadcaster whose systems were disrupted.

Five suspected accomplices _ including the informant _ also are under investigation, but Jaschan "is the big fish," prosecutor Helmut Trentmann said before the trial.

Chmee wrote:So, what do you think is the appropriate punishment for this kid?

White Haven wrote:Sasser was awesome...Sasser and Blaster. It was the perfect 'punishment for being a fucking idiot' virus...you had to pay someone to fix it for you, hence you suffer for your own stupidity, but it did, for the most part, no damage at all (outside of botched, incompetent attempts ot remove it, which dovetails nicely with punishing stupidity). And before anyone jumps up and attacks me, I'm a retail computer tech. I put scores of hours into fixing Sasser systems, all told, so yes, it made me work my ass off. But it made morons shell out money, and it was a wholly nondestructive boot-to-the-head(tm) for people running out-of-date antivirus software on out-of-date operating systems. A few even managed to redeem themselves by learning from the experience.

White Haven wrote:And before anyone jumps up and attacks me, I'm a retail computer tech. I put scores of hours into fixing Sasser systems, all told, so yes, it made me work my ass off. But it made morons shell out money, and it was a wholly nondestructive boot-to-the-head(tm) for people running out-of-date antivirus software on out-of-date operating systems. A few even managed to redeem themselves by learning from the experience.

White Haven wrote:Yes, he's to blame. But so are the asshats who, through their own willful ignorance, allowed their systems to be hashed. If any virus is going to spread out and hit a lot of people, I'm QUITE glad to see it as a nondestructive one. Sasser was a love-tap, a nice little wake-up call that most users needed dearly.

White Haven wrote:Yes, he's to blame. But so are the asshats who, through their own willful ignorance, allowed their systems to be hashed. If any virus is going to spread out and hit a lot of people, I'm QUITE glad to see it as a nondestructive one. Sasser was a love-tap, a nice little wake-up call that most users needed dearly.

gizmojumpjet wrote: That's bullshit. This worm affected Hospitals, Coast Guards, Airlines. People affected by those shutowns were being punished for their own stupidity?

ggs wrote:

gizmojumpjet wrote: That's bullshit. This worm affected Hospitals, Coast Guards, Airlines. People affected by those shutowns were being punished for their own stupidity?

It takes criminal stupidity for places like that to be infected by Sasser.

Now days people are legally liable for maintaining their computer system security to a reasonable level in Australia.

ggs wrote:

gizmojumpjet wrote: That's bullshit. This worm affected Hospitals, Coast Guards, Airlines. People affected by those shutowns were being punished for their own stupidity?

It takes criminal stupidity for places like that to be infected by Sasser.

Now days people are legally liable for maintaining their computer system security to a reasonable level in Australia.

It was the perfect 'punishment for being a fucking idiot' virus...you had to pay someone to fix it for you, hence you suffer for your own stupidity, but it did, for the most part, no damage at all (outside of botched, incompetent attempts ot remove it, which dovetails nicely with punishing stupidity). And before anyone jumps up and attacks me, I'm a retail computer tech.