From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <tuhs-bounces@minnie.tuhs.org>
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on inbox.vuxu.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.8 required=5.0 tests=HEADER_FROM_DIFFERENT_DOMAINS,
	MAILING_LIST_MULTI,RCVD_IN_DNSWL_NONE autolearn=ham autolearn_force=no
	version=3.4.2
Received: from minnie.tuhs.org (minnie.tuhs.org [45.79.103.53])
	by inbox.vuxu.org (OpenSMTPD) with ESMTP id 035aac89
	for <ml@inbox.vuxu.org>;
	Wed, 6 Nov 2019 13:36:33 +0000 (UTC)
Received: by minnie.tuhs.org (Postfix, from userid 112)
	id BD0F69C127; Wed,  6 Nov 2019 23:36:31 +1000 (AEST)
Received: from minnie.tuhs.org (localhost [127.0.0.1])
	by minnie.tuhs.org (Postfix) with ESMTP id 2EDA993D2E;
	Wed,  6 Nov 2019 23:36:05 +1000 (AEST)
Received: by minnie.tuhs.org (Postfix, from userid 112)
 id EAEB393D2E; Wed,  6 Nov 2019 23:36:01 +1000 (AEST)
Received: from smtp-out-3.mxes.net (smtp-out-3.mxes.net [198.205.123.68])
 by minnie.tuhs.org (Postfix) with ESMTPS id 4C1DC93D24
 for <tuhs@minnie.tuhs.org>; Wed,  6 Nov 2019 23:36:01 +1000 (AEST)
Received: from Customer-MUA (mua.mxes.net [10.0.0.1])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by smtp.mxes.net (Postfix) with ESMTPSA id DC11F2737B;
 Wed,  6 Nov 2019 08:35:58 -0500 (EST)
Content-Type: text/plain;
	charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\))
From: Ronald Natalie <ron@ronnatalie.com>
In-Reply-To: <201911061037.xA6AbMlk014673@freefriends.org>
Date: Wed, 6 Nov 2019 08:35:54 -0500
Content-Transfer-Encoding: quoted-printable
Message-Id: <CAFA0142-2D94-4ABB-ABE6-7A5893DB0BDC@ronnatalie.com>
References: <mailman.3.1572832803.30037.tuhs@minnie.tuhs.org>
 <116B676F-5917-481A-9634-0E6C5F702B9B@mcjones.org>
 <B3FDDCB1-F046-486C-B640-5A09D468A421@bitblocks.com>
 <CAFH29tr8ckc+azKr6tCJ9C_0uN7UB_DTE-Bo9An1LjaJ67Mpww@mail.gmail.com>
 <BDB3B2E8-709B-4670-BB6A-146D8A6AB231@serissa.com>
 <13E1AAB3-A21E-4364-934C-D5AA00059419@ronnatalie.com>
 <201911061037.xA6AbMlk014673@freefriends.org>
To: arnold@skeeve.com
X-Mailer: Apple Mail (2.3445.104.11)
X-Sent-To: <dHVoc0BtaW5uaWUudHVocy5vcmc=>
Subject: Re: [TUHS] Happy birthday Morris worm
X-BeenThere: tuhs@minnie.tuhs.org
X-Mailman-Version: 2.1.26
Precedence: list
List-Id: The Unix Heritage Society mailing list <tuhs.minnie.tuhs.org>
List-Unsubscribe: <https://minnie.tuhs.org/cgi-bin/mailman/options/tuhs>,
 <mailto:tuhs-request@minnie.tuhs.org?subject=unsubscribe>
List-Archive: <http://minnie.tuhs.org/pipermail/tuhs/>
List-Post: <mailto:tuhs@minnie.tuhs.org>
List-Help: <mailto:tuhs-request@minnie.tuhs.org?subject=help>
List-Subscribe: <https://minnie.tuhs.org/cgi-bin/mailman/listinfo/tuhs>,
 <mailto:tuhs-request@minnie.tuhs.org?subject=subscribe>
Cc: tuhs@minnie.tuhs.org
Errors-To: tuhs-bounces@minnie.tuhs.org
Sender: "TUHS" <tuhs-bounces@minnie.tuhs.org>

The WIZ hack was well known by the time the worm exploited it.    I=E2=80=99=
d recompiled sendmail to get rid of it even being an option on all the =
machines directly under my control.    The 750 in question was operated =
ostensibly by the JVNCNet people, but I had the root pasword (I guess I =
really didn=E2=80=99t need it with that security hole in it anyhow).

> On Nov 6, 2019, at 5:37 AM, arnold@skeeve.com wrote:
>=20
> Ronald Natalie <ron@ronnatalie.com> wrote:
>=20
>> We got hit at Rutgers on some of our ancillary machines early in the =
day ...
>=20
> Our Unix systems (Emory U. Computer Center and Math/CS systems) were =
running
> a custom sendmail config that I wrote, so the worm bypassed us. We =
were lucky. :-)
>=20
> Arnold