I'd love to see the converse, where the goal is to write code that looks really malicious but is actually a useful and helpful program -- like an apparent rootkit that actually implements a full webserver.