[Info-vax] OpenVMS x64 Atom project

[Phillip Helbig undress to reply]

In article <s9k0hc$lad$1 at dont-email.me>, Dave Froble
<davef at tsoft-inc.com> writes: 

> True fault lies with the first entity that paid any ransom.  Without 
> that the bad guys would not realize what a gold mine they had.

Indeed.

> What, other than getting to run a program, could be done by the bad guys 
> on a VMS system?  I confess, I have not studied the issue at all.

If that program is DELETE, then that's bad enough.

> If the bad guys need to get access and run a program, would defenses 
> that check for valid programs running be successful?

DELETE is a valid program.

In many cases the ransom is not to get sensitive data (which, of course, 
could be sold by the criminal), but rather just to get access to one's 
own data so that normal operations could resume.