26/09/2026
THE STUDENT WHO ACCIDENTALLY BROKE 10% OF THE INTERNET 💻🚨🌐
On November 2, 1988, a 23-year-old Cornell University graduate student named Robert Tappan Morris wanted to answer a simple question:
“How big is the internet, really?”
To find out, he wrote a self-replicating program designed to crawl across the ARPANET (the precursor to today's internet) and count every connected computer. Recognizing that system administrators might notice the program and try to terminate it, Morris added a defensive safeguard: if the code encountered a computer that claimed it was already infected, the program would reinfect it anyway one out of every seven times (roughly 14% of the time).
Morris drastically underestimated the power of exponential growth.
The worm exploited known vulnerabilities in Unix sendmail, fingerd, and weak passwords. Within hours, the replication loop ran completely out of control. Instead of silently idling in the background, the worm reinfected machines dozens of times over. Each reinfection spawned runaway processes that devoured all available RAM, CPU cycles, and process tables until university mainframes, military workstations, and NASA research facilities choked and crashed entirely.
In 1988, an estimated 60,000 computers made up the entire internet. The Morris Worm knocked out roughly 6,000 of them—over 10% of global cyberspace—in a single night.
Panicked network engineers across MIT, Berkeley, and Stanford had to physically pull network cables out of the wall to isolate infected mainframes and disassemble the code byte by byte.
The aftermath reshaped computing history forever:
• Robert Morris became the first person convicted under the newly created U.S. Computer Fraud and Abuse Act (though he later went on to co-found Y Combinator and become a tenured professor at MIT).
• The disaster directly prompted the creation of the world’s first Computer Emergency Response Team (CERT).
• It marked the official end of the internet's "innocent era," forcing engineers to realize that networks could no longer trust connected machines by default.