"BTW, the same section has a dead link for Ramen or Lion worms pointing to
http://www.sans.org/y2k/lion.htm which is currently 404ing me." The following has links that can be used in terms of the defunct link: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=403866 http://www.sophos.com/security/analyses/linuxlion.html http://www.sophos.com/virusinfo/analyses/linuxramen.html Since the article had link to only the lion worm, i have replaced the defunct link with the lion version. Ramen link could also be added for clarity of the context.
