According to Andrew H. Sudduth '83-'85, one ofthe two Harvard affiliates contacted by Morriswhen the worm spread out of control, Morris wassurprised and alarmed at the program's progressand had Sudduth broadcast a warning to computerusers nationwide.

The commission found that Morris probablywanted to spread the worm without detection, butdid not want to clog the computers. It said heclearly should have known the worm would replicateuncontrollably and accused Morris of "recklessdisregard" for the consequences.

Once the worm was unleashed, Morris made only"minimal efforts" to stop its spread and did notinform any person in a position of responsibilityabout the existence of the program, the commissionreported.

The panel disputed industry claims that theworm caused about $96 million in damage,"especially considering no work or data wereirretrievably lost."

The episode's greatest impact may be a loss oftrust among scholars who use the network, whichlinks research centers and universities thatexchange non-classified information.

The report said computer science professionalsseem to favor "strong disciplinary measures," butthe commission said they "should not be so sternas to damage permanently the perpetrator'scareer."

The panel also recommended Cornell develop auniversity-wide policy on computer abuse