Advertisement

'Virus' Whiz Kid Morris Was Hacker, Prankster

Morris, now a Cornell graduate student, iscurrently under investigation for his role ininitiating the virus that disabled some 6000computers on Wednesday. Though the virus causedmany computers to become unusable, it never becamea serious threat to any aspect of nationalsecurity, computer experts said.

His friends point out in his defense that withthe kind out access Morris had, he could havedestroyed data at all the research labs linked tohis terminal.

Ironically, Morris' father, Robert Morris Sr.'54 is a nationally known computer expert whospecializes in securing the UNIX system that hisson penetrated.

"Because of his father, he's very familiar withUNIX security, and it's not hard for him to defeatit," said Pella Harbury '88, who was the youngerMorris' roommate.

But, it is common occurrence for people whowork on computer security to learn first how asystem can be cracked.

Advertisement

While an undergraduate, Morris took ComputerScience 148, "Introduction to VLSI Design," anddid a project on UNIX security as part of hiscourse requirements.

Assistant Professor of Electrical EngineeringJames J. Clark, who directed Morris' project inthe spring of 1987, said the effort involveddesigning a more efficient way of encodingpasswords to the UNIX system. These codes aredesigned to prevent unauthorized entry into thecomputer system.

But Clark, who called Morris "a very goodhacker," said he did not believe that the projectwould have helped Morris inject his virus into theUNIX system.

Friends said Morris was the unfortunate victimof a small programming error that made a minorexperiment turn into a national disaster.

"I think Robert just didn't think about it--itwas one of these things where his brain had beenturned off--he just wasn't thinking," saidAssistant Professor of Computer Science MarkFriedell, who advised Morris' thesis and spoke tohim several days before the virus was made public."I can understand the technical miscalculation--itwas something I could have made late at nightmyself."

While Friedell praised Morris' ability, headded that the UNIX system, which Morrispenetrated, was known to have dozens of seriousloopholes which could be used by an experiencedhacker.

"I wouldn't have been surprised if it were anyof the people you work with" at Aiken, saidNitzberg, a mathematics graduate student.

Morris got much of his experience in computersat Bell Labs, where his father worked beforejoining the National Security Agency as aspecialist in computer security. While at Bell,colleagues say, he met Dennis Ritchie, one of theoriginal developers of the UNIX system. Harvardprogrammers learned of the younger Morris throughRitchie who told Harvard contacts to watch for thefreshman.

"He said, 'Keep after this kid, he's brilliant,but he can also get through security holes,'" saidAndrew H. Sudduth '83-'85, a Harvard systemsadministrator and Olympic crew medalist. Accordingto Sudduth, the Bell expert added that Morris "isdeveloping a sense of ethics."

Morris was hired at Harvard's Aiken ComputationLab during his freshman year and continued to workthere until he graduated this spring. Colleaguessaid that Morris was unusually helpful and thatthey went to him for advice in solving difficultproblems. "To do what RTM did for us free wouldhave cost us $100,000 a year," said Graham.

Advertisement