The 2006 Underhanded C Contest Begins

Xcott Craver writes "The second annual Underhanded C Code Contest is live as of April 4th, and runs until July 4th. The object is to write malicious C code that looks perfectly readable and innocent under informal inspection of the source."

Comments

I Win

[ExE122]

In this contest you must write code that is as readable, clear, innocent and straightforward as possible, and yet it must fail to perform at its apparent function. To be more specific, it should do something subtly evil.

system("c:\Program Files\Internet Explorer\iexplore.exe");

Where's my prize?

--
"Man Bites Dog
Then Bites Self"

Re:I Win

[darkmeridian]

In this contest you must write code that is as readable, clear, innocent and straightforward as possible ...

Read the conditions of the contest clearly. You obviously lose.

Re:Can someone explain this to me?

[bluelip]

It provides a method to enumerate the techniques used by those with less than pure intentions.

IOW, it helps folks learn to spot these 'bugs' more readily.

I know...

[scolby]

...I'll design a media player that appears to be playing a CD when it's actually installing a root kit that creates an easy way back door for malware.

And then I'll get sued by Sony for copyright infringement.

Re:Can someone explain this to me?

[adyus]

Um, I think your signature should be number three:

1. It teaches you not to take all code at face value, and actually read into it.
2. It's fun.
3. It's like sex, except I'm having it!

:)

Re:Can someone explain this to me?

[Guignol]

Yes, for instance we could say it is malicious if it wouldn't halt

Re:Can someone explain this to me?

[bitt3n]

It's like a wet t-shirt contest, allowing you to show off your rack in a controlled environment. Except in this case it's the metaphorical rack nerds develop from years of programming prowess, and not the actual rack they develop from scarfing down doritos and Mountain Dew during the same interval.

My entry!

[radiumhahn]

#include <stdio.h>

main() {

/* Rob a bank! */
/* Steal Stuff! */
printf("hello, world\n");
/* Use Drugs! */
/* Kill, Kill, Kill! */
}

My entry -- the world's last C bug

[PeeAitchPee]

An oldie but goodie . . .

while (1)
{
status = GetRadarInfo();
if (status = 1)
LaunchMissiles();
}

Re:My entry -- the world's last C bug

[CoughDropAddict]

or:

while(1)
{
  status = GetRadarInfo();
  if(status == 1);
    LaunchMissles();
}

Re:Can someone explain this to me?

[kimvette]

Perhaps this "contest" is sponsored behind the scenes by Sony, in their search for more stealtht rootkit implementation methodologies in their next Anti-Fair-Use software release. They're counting on some smartass or two submitting really clever malicious code, I just know they are!

This has been the crackpot conspiracy theory of the day.

(Why yes, I'm bored! Why do you ask?)