From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-0.8 required=5.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RCVD_IN_DNSWL_NONE autolearn=ham autolearn_force=no version=3.4.2 Received: from minnie.tuhs.org (minnie.tuhs.org [45.79.103.53]) by inbox.vuxu.org (OpenSMTPD) with ESMTP id ed62c729 for ; Tue, 5 Nov 2019 16:05:18 +0000 (UTC) Received: by minnie.tuhs.org (Postfix, from userid 112) id 660BD93D96; Wed, 6 Nov 2019 02:05:17 +1000 (AEST) Received: from minnie.tuhs.org (localhost [127.0.0.1]) by minnie.tuhs.org (Postfix) with ESMTP id A80D793D6D; Wed, 6 Nov 2019 02:04:55 +1000 (AEST) Received: by minnie.tuhs.org (Postfix, from userid 112) id 178A893D6D; Wed, 6 Nov 2019 02:04:53 +1000 (AEST) Received: from smtp-out-3.mxes.net (smtp-out-3.mxes.net [198.205.123.68]) by minnie.tuhs.org (Postfix) with ESMTPS id 9423A93D2E for ; Wed, 6 Nov 2019 02:04:52 +1000 (AEST) Received: from Customer-MUA (mua.mxes.net [10.0.0.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 1B92C27333; Tue, 5 Nov 2019 11:04:50 -0500 (EST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) From: Ronald Natalie In-Reply-To: Date: Tue, 5 Nov 2019 11:04:49 -0500 Content-Transfer-Encoding: quoted-printable Message-Id: <13E1AAB3-A21E-4364-934C-D5AA00059419@ronnatalie.com> References: <116B676F-5917-481A-9634-0E6C5F702B9B@mcjones.org> To: Lawrence Stewart X-Mailer: Apple Mail (2.3445.104.11) X-Sent-To: Subject: Re: [TUHS] Happy birthday Morris worm X-BeenThere: tuhs@minnie.tuhs.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: The Unix Heritage Society mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: TUHS main list Errors-To: tuhs-bounces@minnie.tuhs.org Sender: "TUHS" We got hit at Rutgers on some of our ancillary machines early in the day = (the 750 that belonged really to the the JVN computing center mostly) = and I collected the evidence and learned through the internet grapevine = where the vulnerabilities were and plugged them (also wrote some scripts = to look for the holes and evidence of the worm on other machines at RU). = Got everything cleaned up by noon time or so and I figured that was = the end. The next day I was scheduled to be in DC on other business so = I felt confident on leaving. Apparently however, the biggest impact on us of the worm had yet to hit. = The news caught wind of it that evening and started calling the = computer center early the next morning. I wasn=E2=80=99t there so it = pretty much chewed up all of Chuck Hedrick=E2=80=99s day answering press = inquiries.=