http://www.kumite.com/myths
Computer Virus Myths home page
Find out what "kumite" means in www.kumite.com

Announcing the First Annual
"John McAfee" Awards
for Computer Virus Hysteria!

Computer Virus Myths home These awards are named after McAfee Associates Inc. founder John McAfee, who single-handedly set the standard
for virus hysteria in 1988.  The mainstream media cried out for a telegenic messiah -- and McAfee lowered himself
to the challenge.  (Much like President Bill Clinton, but let's not digress.)  His
<A HREF=doom & gloom statements delighted reporters, panicked the computing world, and pushed his company's software to the top of the charts.

Sadly, John McAfee fell from the media's grace after the Michelangelo fiasco of 1992. Associated Press, Reuters', United Press International, and CNN (among many others) suffered incredible blows to their journalistic reputations. Needing a scapegoat to cover up their own incompetent reporting, these agencies chose poor old McAfee -- they dumped him like Princess Diana dumped Prince Charles.

John McAfee left the industry in disgrace. But he wrote the book on virus hype ("Computer Viruses, Worms, Data Diddlers, Killer Programs, and Other Threats to Your System," 1989, St. Martin's Press) and a new legion of followers relentlessly beats the drum of hysteria in his name.

How we picked the 1996 nominees

Crypt Newsletter editor George C. Smith and virus myths researcher Rob Rosenberger picked the nominees after a long, thorough process. We'd love to give you details, but, um, the NSA swore us to secrecy.

How we picked the winners

That's where you came in! Internet users cast their ballots in November 1996 for the person, company, reporter, and event they felt deserved a Computer Virus Hysteria award. They got one vote per category, one ballot per person. (The judges' decisions are final, so please don't argue with us if you won.)

What did the winners get as a prize?

We honestly want to extend computer literacy. So, each winner receives a book on computer viruses, computer security, or the culture of the Internet. This way they can figure out what's going on in the world of computers! The following authors or companies each graciously donated a book to the prize closet:

What did the runners-up get?

Each runner-up received a special "reality check" worth actual money -- in the form of a prepaid calling card. That way, they can dial somebody who really knows what he's talking about.

What did the judges get?

We got publicity. Seriously! The more people who dropped by to vote, the more we enlightened them about computer virus myths & misconceptions & propaganda & hoaxes.

The list of winners for 1996!

The PUBLICITY category

And the winner is... Symantec, Inc. (116 votes)!

Symantec issued a March 1996 press release describing a new Norton AntiVirus feature -- the ability to detect Java viruses. However, the press release admits "no current Java virus threats exist," leading many experts to question how you could test this feature to see if it really works.

But it doesn't matter. The press release claims Symantec customers can't test it -- because the feature doesn't yet exist in Norton AntiVirus! "At the first sign of a Java virus threat, Symantec will make this technology available to customers via an immediate virus definition update...."

The runners-up include

Jack Brock (53 votes):
A long-time bureaucrat at the General Accounting Office, Brock penned numerous reports over the years about U.S. government computer troubles. He testified before Congress in 1996 about his report on the government's vulnerability to computer attack:
"Terrorists and other adversaries now have the ability to launch untraceable attacks from anywhere in the world. They could infect critical systems with sophisticated computer viruses, potentially causing them to malfunction."
Yet a close reading of his GAO report shows very little information about viruses, period. When George Smith telephoned to ask for more details, Brock claimed the National Security Agency swore him to secrecy -- a novel way to avoid saying anything substantive about computer viruses!

CompUSA (71 votes):
This national chain of computer stores issued a press release urging people to buy antivirus software to combat Hare's September trigger date. They didn't say anything about the Hare virus media fiasco in August (itself a winner in the "event" category), but this omission didn't warrant a Computer Virus Hysteria nomination.

Instead, our nominating committee based its decision on the very last paragraph of the press release: "ATTENTION MEDIA: In-store interviews regarding virus protection are being scheduled now. To schedule an interview with CompUSA personnel, contact...."

Makes sense to us! Why would reporters want to interview a virus expert by phone if they could interview a local computer store sales manager in person?

Peter Harrison (10 votes):
A marketing manager for Cheyenne Software, he figured prominently in the recent Hare virus media fiasco (itself a winner in the "event" category). Harrison must hold some serious credentials -- the company's press release about Hare quoted him instead of one of Cheyenne's virus experts.

(return to top)

The QUOTATION category

And the winner is... Ann Landers (73 votes)!

The well-known advice expert exchanged diatribes in her column with U.S. Senator Patrick Leahy regarding the Internet. Leahy says he regularly surfs the web; Landers admits she doesn't even own a computer. But failure to own a computer doesn't detract from her Internet expertise:
"I don't have to have a computer to know what's out there."

The runners-up include

Mark Clauder (48 votes):
This director of product development at CompUSA (itself a runner-up in the "publicity" category) uttered an interesting quote in a September press release. They sell antivirus software made by McAfee, Symantec, and Cheyenne -- all of which offer downloadable versions as shareware. But Clauder explained why you should buy weeks-old software from CompUSA rather than download current versions from an Internet site:
"If you download your protection ... you may not be protected from the latest strains of a virus."

Rick Kreysar (26 votes):
This vice-president of McAfee Associates took part in a RealAudio interview with PC World Online's Brian McWilliams. Mind you, we named the Virus Hysteria Awards in honor of company founder John McAfee. VP Kreysar suffered a memory lapse during the interview:
"McAfee [Associates] has never been a company to hype viruses, and I think it is a poor trend that is happening ... in the last year."

Larry Magid (5 votes):
A syndicated computer pundit, Magid wrote a post-mortem column about the Hare virus media fiasco (itself a winner in the "event" category). Larry told his readers to calm down and he offered some advice for avoiding viruses. But why should readers feel confident about Magid's advice? After all, he openly admitted in his column:
"As far as I know, I've only twice been infected by viruses."

Richard M. Smith (39 votes):
This president of Phar Lap Software went ballistic when he discovered an exploitable bug in Netscape Navigator. Smith holds no credentials in the fields of computer security -- but this didn't stop him from chastizing legitimate experts who seek to dispel the Good Times urban legend. In a public message to NCSA's Mich Kabay, Smith pointed to the obscure bug he found and adamantly proclaimed:
"Its the good time virus for real."

Brian Williams (62 votes):
An anchor for the new MSNBC cable network (and himself a winner in the "journalism" category), Williams conducted a live interview about the Hare virus a few days before it turned into a media fiasco. Williams' inexperience with computers (ironic for a network co-founded by Microsoft) led to a spectacular quote about his fear of the Hare virus:
"I'm scared to death that I'm going to get this or, even worse, my computer...."
(return to top)

The EVENT category

And the winner is... the Hare virus scare (114 votes)!

News agencies around the world screamed about a "deadly new" virus scheduled to activate on August 22 and September 22. The brand-new Hare virus (pronounced HAR-ee, as in Hare Krishna) had surfaced in countries all over the world. Some "experts" recommended everybody turn off their computers on those days, else Hare would destroy everything in its path.

And yet the Hare virus turned into another major media fiasco -- just one more in a string of serious media fiascos over the years. Current estimates now put Hare's toll at about one hundred computers worldwide. Those who predicted a worldwide catastrophe, as usual, credit the media hysteria itself for "helping to reduce" the total number of affected computers.

The runners-up include

Boza virus scare (23 votes):
The Associated Press warned at the beginning of the year of a new virus targeted at Windows 95 programs. Named after a mild Bulgarian brew, the Boza virus basically served as a press release for an Australian virus-writing group.

Boza contained a number of bugs despite its simple design and it quickly earned the nickname "bozo." But the media didn't care -- they latched onto its status as "the first Windows 95 virus." Boza came hot on the heels of Microsoft's rollout for their new operating system, making it a newsworthy virus by definition.

AP at least cited Paul Ducklin of Sophos, who acknowledged the virus had not yet appeared "in the wild" -- but this fact quickly withered away as other news stories appeared about Boza. Antivirus companies scrambled to issue copycat press releases and they, too, seemed to overlook this important point. Frightened computer users who didn't even run Windows 95 concluded their computers might have contracted the virus!

Java virus scare (113 votes):
NetScape Navigator stood head & shoulders above other web browsers when it added the ability to run Java applets. It greatly increased the functionality of the World Wide Web, but it also generated a debate about computer security.

Rumors of security holes in NetScape's Java module abound -- and, true to form, the media immediately screamed "virus!" Various experts studied the Java language and pretty much dismissed the idea.

Suddenly, Symantec (itself a winner in the "publicity" category) appeared out of nowhere with a bizzare press release saying they had a Java virus scanner in development. Not only did Symantec claim hackers could write viruses in Java, they said hackers could write two different types of Java viruses!

The computer media latched onto this press release with absolute gusto. Many of them printed it verbatim; others rewrote the press release to make it sound like a breaking news story. The term "black widow" sprung up to describe Java viruses. Many companies and government agencies quickly overreacted, ordering workers to disable Java because of the perceived threat. (Notice we said "perceived.")

And yet even in November we still can't find any Java viruses. Oh, sure: one person made a name for himself by writing about "hostile applets" and he even includes links to some. Big deal -- even Microsoft offers a hotlink to his website so users can learn about Java security issues.

(return to top)

Special "GERALDO RIVERA" award for investigative journalism

And the winner is... Brian Williams (53 votes)!

An anchor for the new MSNBC cable network (and also a runner-up in the "quotation" category), Williams conducted a riveting live interview with Mary Engstrom, general manager of Symantec. We think the transcript speaks for itself: (With all due respect, this award should go to the MSNBC director who didn't allocate enough time for a legit interview. Basically, Brian Williams said "here's Mary Engstrom," she said "watch out for the Hare virus," and Williams said "here's Bob with the weather...")

The runners-up include

Lisa Carricaburu (8 votes):
A reporter for the Salt Lake [City] Tribune, Carricaburu quoted some interesting pseudo experts about the recent Hare virus scare. Various doom & gloom statements came from Peter Harrison, a marketing manager for Cheyenne Software (himself a runner-up in the "publicity" category), and Brett Miller, a marketing engineer at Intel. The report also claimed up to 100,000 computers would fail on 22 August because of Hare.

Carricaburu's story also pointed out an important oversight. You see, genuine experts typically claim 1992's Michelangelo virus messed up only 10,000 to 20,000 computers -- but that's wrong. Carricaburu says it "affected millions." (Experts around the world stand corrected.)

James Daly (32 votes):
"DANGER! Deadly new computer viruses want to kill your PC" screamed the headline of James Daly's story in PC/Computing magazine. Actually, it was a comparison review of antivirus software.

But two sidebar items stood out -- an interview with Ian "Captain Zap" Murphy and the "true tale" of a "virus attack on a nuclear power plant." The spine-chilling Zap interview convinced us Murphy was an electronic bogeyman, but Daly soothes readers with news that Captain Zap has since repented. (He repays society by working as a born-again computer security consultant.)

The virus attack on a nuclear plant? Administrative computers accidentally picked up the Word.Concept virus. Daly describes the "grueling task" as a heroic crew struggled to apply a simple fix to computers during the Labor Day weekend. "By Tuesday morning, when ... employees returned from their weekend in the sun, things were running again."

Pittsburgh Business Wire (23 votes):
The Hare virus proved a serious media fiasco (and it won in this year's "event" category). News agencies suffered blows to their reputations in August and wisely stayed away from the story in September. But this didn't deter the Pittsburgh Business Wire! They published a frightening 9/19/96 story:
PC users beware. [22 September] marks the return of one of the deadliest computer viruses ever created.... [Hare will] potentially destroy data on thousands of hard drives.... "This is one of the most destructive I have ever encountered," says Professor Bob Hopkins, director of the Cooper Union Computer Center in New York.

According to Hopkins, the virus is proving itself immune to some anti-virus programs because it can change itself to prevent detection. Computer experts are warning PC users to use any means possible to protect their valuable data....

The Pittsburgh Business Wire report then switches its focus, describing one of those "any means possible" protection methods -- namely the SureFind data storage service, a company conveniently located in Pittsburgh!

Also of note: according to the Cooper Union University website, they offer no computer science degree program. The list of faculty members identifies Bob Hopkins as an associate professor, and the only "computer" teacher.

Stephen Pizzo (42 votes):
The upcoming date of 1/1/2000 will take its toll on many companies and government agencies -- they've written millions of lines of computer code which assume a year has only two digits (e.g. 1996 = "96"). When the year 2000 rolls around, many programs & operating systems will think it's the year 1900 instead, making for some "interesting" computational problems.

Mind you, 1/1/2000 has nothing to do with viruses -- it's just a special date on the Gregorian calendar. Web Review reporter Stephen Pizzo propagated a new myth in a story about the year-2000 problem. The opening paragraph claims:

"The biggest and baddest computer virus in history is less than four years away from smashing the world's computer systems senseless. It's called the 'Millennium Virus.' "

Larry Seltzer (31 votes):
PC Magazine's Internet technical director filed a sensationalist story titled "Open Any E-Mail Letter Bombs Lately?" It also appeared on PC Week's website under the less sensational headline "Browser-based E-mail clients can be dangerous." The story begins with a dire warning:
"One of the most infamous virus scares in the past couple of years was the Good Times virus, which was supposed to infect PCs through e-mail. It was rightly dismissed as a hoax at the time, because simply reading an e-mail message couldn't damage a PC. Now, for the first time, the idea of a Good Times-like virus is a real threat. HTML code was recently posted on CompuServe that crashes Netscape Navigator...."
All of Seltzer's hype appears to come from a single source: Richard M. Smith, president of Phar Lap Software (and a runner-up in the "quotation" category), who discovered an obscure bug in Netscape Navigator.

Smith admits he holds no credentials in the fields of computer security. He also admits talking to Seltzer about the bug before contacting Netscape. Oh, and Netscape quietly released a fix for it just one week after Seltzer's story hit the streets.

Jon Swartz (22 votes):
This staff writer for the San Francisco Chronicle wrote about the "top secret" laboratory where Symantec (itself a winner in the "publicity" category) studies computer viruses. You can read the original story or the detailed critique if you wish, but we'll try to cover it briefly here. He begins by giving the Symantec AntiVirus Research Center a cool acronym: SARC. "Like a scene out of the sci-fi movie 'Andromeda Strain,' technicians in a stark, claustrophobic lab operate the latest in high-tech gear to pinpoint and terminate a dangerous computer bug."

Swartz lets readers know computer viruses "do not spread by casual contact -- for example, by simply laying a contaminated disk on top of a clean one or on top of a computer." He quotes Symantec's Alex Haddox, who said an unnamed company once "was losing $1 million a day" from a virus attack until Symantec stepped in with updated antivirus software. (No mention of what the unnamed company paid for this lifesaving help ... assuming any company truly lost $1 million a day in the first place because of a virus.)

Swartz offers the (ahem) romantic description of your typically evil, James-Bond-villan hacker whose slightest temper tantrum could destroy the computing world. "Most are under 18, male, brilliant and itching to create a high-tech plague that will wipe out reams of data as well as generate headlines." Headlines Jon Swartz seems willing to write!

Swartz also helped correct the record about where viruses come from. You see, experts believe viruses come from places all over the world, with just a couple of high-profile items emerging from the East European bloc. But that's not true. Swartz reveals most viruses "originated in Bulgaria and were primarily political messages that did not damage PCs." He also reminds us the Michelangelo virus first appeared in 1990. (The experts stand corrected.)

Swartz leaves readers with a telltale quote from Symantec's hacker-war veteran, Alex Haddox: "It's a long battle, but one we will not back away from." Earlier in the story, you learn why they won't give up the fight -- because it's profitable! "Symantec's Windows-based anti-virus software sales were $46.5 million last year..."

United Press Int'l (37 votes):
Never one to run away from a media fiasco, UPI issued a follow-up newswire about the second Hare virus trigger date scheduled for Sunday, 22 September. This report contained at least one major error in every paragraph! Highlights include:
(return to top)

Total votes accepted: 262

Rejected votes:

1 coworker affiliated with a nominee
11 failed to provide a valid Internet address
1 "cemetery" ballot (voted in another's name)
3 duplicate ballots stuffed into the ballot box
55 blank ballots
Please note: some people failed to vote in all categories.

Read about the 1997 CVHA winners & runners-up...

Top of page Home page Index page No frames Thinkers' page Copyright info Website awards Download stuff 1997 CVHA 1997 CVHA
email