From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <tuhs-bounces@minnie.tuhs.org>
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on inbox.vuxu.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.8 required=5.0 tests=HEADER_FROM_DIFFERENT_DOMAINS,
	MAILING_LIST_MULTI,RCVD_IN_DNSWL_NONE autolearn=ham autolearn_force=no
	version=3.4.2
Received: from minnie.tuhs.org (minnie.tuhs.org [45.79.103.53])
	by inbox.vuxu.org (OpenSMTPD) with ESMTP id a87ec5e3
	for <ml@inbox.vuxu.org>;
	Tue, 8 Oct 2019 18:39:37 +0000 (UTC)
Received: by minnie.tuhs.org (Postfix, from userid 112)
	id 428FD9BC1C; Wed,  9 Oct 2019 04:39:36 +1000 (AEST)
Received: from minnie.tuhs.org (localhost [127.0.0.1])
	by minnie.tuhs.org (Postfix) with ESMTP id 8BF529B9B4;
	Wed,  9 Oct 2019 04:39:16 +1000 (AEST)
Received: by minnie.tuhs.org (Postfix, from userid 112)
 id EA48C9B9B4; Wed,  9 Oct 2019 04:39:14 +1000 (AEST)
Received: from oclsc.com (oclsc.com [206.248.137.164])
 by minnie.tuhs.org (Postfix) with SMTP id 52CE59B9AF
 for <tuhs@tuhs.org>; Wed,  9 Oct 2019 04:39:12 +1000 (AEST)
From: Norman Wilson <norman@oclsc.org>
To: tuhs@tuhs.org
Date: Tue, 08 Oct 2019 14:38:43 -0400
Message-ID: <1570559927.29337.for-standards-violators@oclsc.org>
Subject: Re: [TUHS] Recovered /etc/passwd files
X-BeenThere: tuhs@minnie.tuhs.org
X-Mailman-Version: 2.1.26
Precedence: list
List-Id: The Unix Heritage Society mailing list <tuhs.minnie.tuhs.org>
List-Unsubscribe: <https://minnie.tuhs.org/cgi-bin/mailman/options/tuhs>,
 <mailto:tuhs-request@minnie.tuhs.org?subject=unsubscribe>
List-Archive: <http://minnie.tuhs.org/pipermail/tuhs/>
List-Post: <mailto:tuhs@minnie.tuhs.org>
List-Help: <mailto:tuhs-request@minnie.tuhs.org?subject=help>
List-Subscribe: <https://minnie.tuhs.org/cgi-bin/mailman/listinfo/tuhs>,
 <mailto:tuhs-request@minnie.tuhs.org?subject=subscribe>
Errors-To: tuhs-bounces@minnie.tuhs.org
Sender: "TUHS" <tuhs-bounces@minnie.tuhs.org>

Back in the heyday of uucp, some sites were lazy and allowed
uucico access to any file in the file system (that was accessible
to the uucp user).  A common ploy for white hats and black hats
was to try
	uucp remotesys!/etc/passwd ~/remotesys
or the like, and see what came in and whether it had any easy
hashes (shadow password files didn't quite exist yet).

The system known to the uucp world as research! was more
careful: / was mapped to /usr/spool/uucp.  We left a phony
etc/passwd file there, containing plausible-looking entries
with hashes that, if cracked, spelled out

	why
	are
	you
	wasting
	your
	time

I don't remember whether anyone ever stole it by uucp, though
I think Bill Cheswick used it to set up the phony system
environment for Berferd to play in (Google for `cheswick berferd'
if you don't know the story).

Norman Wilson
Toronto ON