[linux-elitists] Fun with SirCam

Rick Moen rick@linuxmafia.com
Fri Aug 3 22:17:50 PDT 2001

begin  Karsten M. Self quotation:
> Likewise, dd, which you should already have:
>    dd if=<attachment> bs=32 skip=4288 of=<document> 
> ...selecting a larger blocksize (32 is the largest integer divisor of
> 137216) lets dd run a bit faster than it would with bs=1 skip=137216.

Indeed.  Points for fb:

1.  Runs on any platform that has a C compiler; Win32 and x86 Linux
    binaries furnished.
2.  Lets you easily get the entire worm binary, in addition to the
    document.  (Some folks have found it interesting to run it through
    a disassembler.)

Also, fb is a just a really nice binary-manipulation tool.  Worth having
around, on its own merits.

Cheers,                             "Ceterum censeo Linux propaganda est."
Rick Moen                                        -- Seth David Schoen

More information about the linux-elitists mailing list