The Unix Heritage Society mailing list
 help / color / Atom feed
* [TUHS] Happy birthday, Morris Worm!
@ 2019-11-01 20:36 Dave Horsfall
  2019-11-01 21:12 ` Dan Cross
  2019-11-01 21:49 ` [TUHS] " A. P. Garcia
  0 siblings, 2 replies; 8+ messages in thread
From: Dave Horsfall @ 2019-11-01 20:36 UTC (permalink / raw)
  To: The Eunuchs Hysterical Society; +Cc: Computer Old Farts Followers

The infamous Morris Worm was released in 1988; making use of known 
vulnerabilities in Sendmail/finger/RSH (and weak passwords), it took out a 
metric shitload of SUN-3s and 4BSD Vaxen (the author claimed that it was 
accidental, but the idiot hadn't tested it on an isolated network first). A 
temporary "condom" was discovered by Rich Kulawiec with "mkdir /tmp/sh".

Another fix was to move the C compiler elsewhere.

-- Dave

^ permalink raw reply	[flat|nested] 8+ messages in thread

* Re: [TUHS] Happy birthday, Morris Worm!
  2019-11-01 20:36 [TUHS] Happy birthday, Morris Worm! Dave Horsfall
@ 2019-11-01 21:12 ` Dan Cross
  2019-11-01 21:55   ` [TUHS] [COFF] " Clem Cole
  2019-11-01 21:49 ` [TUHS] " A. P. Garcia
  1 sibling, 1 reply; 8+ messages in thread
From: Dan Cross @ 2019-11-01 21:12 UTC (permalink / raw)
  To: Dave Horsfall
  Cc: The Eunuchs Hysterical Society, Computer Old Farts Followers

[-- Attachment #1: Type: text/plain, Size: 916 bytes --]

On Fri, Nov 1, 2019 at 4:37 PM Dave Horsfall <dave@horsfall.org> wrote:

> The infamous Morris Worm was released in 1988; making use of known
> vulnerabilities in Sendmail/finger/RSH (and weak passwords), it took out a
> metric shitload of SUN-3s and 4BSD Vaxen (the author claimed that it was
> accidental, but the idiot hadn't tested it on an isolated network first).
> A
> temporary "condom" was discovered by Rich Kulawiec with "mkdir /tmp/sh".
>
> Another fix was to move the C compiler elsewhere.
>

This comes up every year, but could I ask that you please stop referring to
Robert T. Morris as an idiot? He acted foolishly and destructively, yes,
but he was quite young at the time and he paid for his mistake. He's gone
on to do very good work in systems and have a productive career; there
really is no need to continue to castigate him in this manner for a mistake
he made 31 years ago.

        - Dan C.

[-- Attachment #2: Type: text/html, Size: 1287 bytes --]

<div dir="ltr"><div dir="ltr">On Fri, Nov 1, 2019 at 4:37 PM Dave Horsfall &lt;<a href="mailto:dave@horsfall.org">dave@horsfall.org</a>&gt; wrote:<br></div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">The infamous Morris Worm was released in 1988; making use of known <br>
vulnerabilities in Sendmail/finger/RSH (and weak passwords), it took out a <br>
metric shitload of SUN-3s and 4BSD Vaxen (the author claimed that it was <br>
accidental, but the idiot hadn&#39;t tested it on an isolated network first). A <br>
temporary &quot;condom&quot; was discovered by Rich Kulawiec with &quot;mkdir /tmp/sh&quot;.<br>
<br>
Another fix was to move the C compiler elsewhere.<br></blockquote><div><br></div><div>This comes up every year, but could I ask that you please stop referring to Robert T. Morris as an idiot? He acted foolishly and destructively, yes, but he was quite young at the time and he paid for his mistake. He&#39;s gone on to do very good work in systems and have a productive career; there really is no need to continue to castigate him in this manner for a mistake he made 31 years ago.</div><div><br></div><div>        - Dan C.</div><div><br></div></div></div>

^ permalink raw reply	[flat|nested] 8+ messages in thread

* Re: [TUHS] Happy birthday, Morris Worm!
  2019-11-01 20:36 [TUHS] Happy birthday, Morris Worm! Dave Horsfall
  2019-11-01 21:12 ` Dan Cross
@ 2019-11-01 21:49 ` " A. P. Garcia
  2019-11-02  6:35   ` William Corcoran
  1 sibling, 1 reply; 8+ messages in thread
From: A. P. Garcia @ 2019-11-01 21:49 UTC (permalink / raw)
  To: Dave Horsfall
  Cc: The Eunuchs Hysterical Society, Computer Old Farts Followers

[-- Attachment #1: Type: text/plain, Size: 1266 bytes --]

On Fri, Nov 1, 2019, 4:37 PM Dave Horsfall <dave@horsfall.org> wrote:

> The infamous Morris Worm was released in 1988; making use of known
> vulnerabilities in Sendmail/finger/RSH (and weak passwords), it took out a
> metric shitload of SUN-3s and 4BSD Vaxen (the author claimed that it was
> accidental, but the idiot hadn't tested it on an isolated network first).
> A
> temporary "condom" was discovered by Rich Kulawiec with "mkdir /tmp/sh".
>
> Another fix was to move the C compiler elsewhere.
>
> -- Dave
>

One of my comp sci professors was a grad student at Cornell when this
happened. He shared a small office with Morris and some other students. He
said that he had to explain that he had absolutely nothing to do with it on
quite a few occasions.

Morris was caught partly because he used the Unix crypt command to encrypt
his source code. The command was a computer model of the Enigma machine,
and its output could be and indeed was cracked, after retrieving the
encrypted code from a backup tape.

It's interesting that the worm was quickly detected. The reason was that it
kept infecting the same machines, and as you referred to, it contained a
password cracker, which slowed those machines to a crawl because of the
multiple instances running.

>

[-- Attachment #2: Type: text/html, Size: 1904 bytes --]

<div dir="auto"><div><br><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Nov 1, 2019, 4:37 PM Dave Horsfall &lt;<a href="mailto:dave@horsfall.org">dave@horsfall.org</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">The infamous Morris Worm was released in 1988; making use of known <br>
vulnerabilities in Sendmail/finger/RSH (and weak passwords), it took out a <br>
metric shitload of SUN-3s and 4BSD Vaxen (the author claimed that it was <br>
accidental, but the idiot hadn&#39;t tested it on an isolated network first). A <br>
temporary &quot;condom&quot; was discovered by Rich Kulawiec with &quot;mkdir /tmp/sh&quot;.<br>
<br>
Another fix was to move the C compiler elsewhere.<br>
<br>
-- Dave<br></blockquote></div></div><div dir="auto"><br></div><div dir="auto">One of my comp sci professors was a grad student at Cornell when this happened. He shared a small office with Morris and some other students. He said that he had to explain that he had absolutely nothing to do with it on quite a few occasions. </div><div dir="auto"><br></div><div dir="auto">Morris was caught partly because he used the Unix crypt command to encrypt his source code. The command was a computer model of the Enigma machine, and its output could be and indeed was cracked, after retrieving the encrypted code from a backup tape.</div><div dir="auto"><br></div><div dir="auto">It&#39;s interesting that the worm was quickly detected. The reason was that it kept infecting the same machines, and as you referred to, it contained a password cracker, which slowed those machines to a crawl because of the multiple instances running.</div><div dir="auto"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
</blockquote></div></div></div>

^ permalink raw reply	[flat|nested] 8+ messages in thread

* Re: [TUHS] [COFF]  Happy birthday, Morris Worm!
  2019-11-01 21:12 ` Dan Cross
@ 2019-11-01 21:55   ` " Clem Cole
  2019-11-01 22:25     ` A. P. Garcia
  0 siblings, 1 reply; 8+ messages in thread
From: Clem Cole @ 2019-11-01 21:55 UTC (permalink / raw)
  To: Dan Cross; +Cc: Computer Old Farts Followers, The Eunuchs Hysterical Society

[-- Attachment #1: Type: text/plain, Size: 1432 bytes --]

+1.  Well said Dan.

We all have made and will make mistakes in the future.  It was an error and
we all learned from it.  It’s not helpful to continue to hark back on it.

On Fri, Nov 1, 2019 at 2:13 PM Dan Cross <crossd@gmail.com> wrote:

> On Fri, Nov 1, 2019 at 4:37 PM Dave Horsfall <dave@horsfall.org> wrote:
>
>> The infamous Morris Worm was released in 1988; making use of known
>> vulnerabilities in Sendmail/finger/RSH (and weak passwords), it took out
>> a
>> metric shitload of SUN-3s and 4BSD Vaxen (the author claimed that it was
>> accidental, but the idiot hadn't tested it on an isolated network first).
>> A
>> temporary "condom" was discovered by Rich Kulawiec with "mkdir /tmp/sh".
>>
>> Another fix was to move the C compiler elsewhere.
>>
>
> This comes up every year, but could I ask that you please stop referring
> to Robert T. Morris as an idiot? He acted foolishly and destructively, yes,
> but he was quite young at the time and he paid for his mistake. He's gone
> on to do very good work in systems and have a productive career; there
> really is no need to continue to castigate him in this manner for a mistake
> he made 31 years ago.
>
>         - Dan C.
>
> _______________________________________________
> COFF mailing list
> COFF@minnie.tuhs.org
> https://minnie.tuhs.org/cgi-bin/mailman/listinfo/coff
>
-- 
Sent from a handheld expect more typos than usual

[-- Attachment #2: Type: text/html, Size: 2333 bytes --]

<div><div dir="auto">+1.  Well said Dan.  </div></div><div dir="auto"><br></div><div dir="auto">We all have made and will make mistakes in the future.  It was an error and we all learned from it.  It’s not helpful to continue to hark back on it. </div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Nov 1, 2019 at 2:13 PM Dan Cross &lt;<a href="mailto:crossd@gmail.com">crossd@gmail.com</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div dir="ltr">On Fri, Nov 1, 2019 at 4:37 PM Dave Horsfall &lt;<a href="mailto:dave@horsfall.org" target="_blank">dave@horsfall.org</a>&gt; wrote:<br></div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">The infamous Morris Worm was released in 1988; making use of known <br>
vulnerabilities in Sendmail/finger/RSH (and weak passwords), it took out a <br>
metric shitload of SUN-3s and 4BSD Vaxen (the author claimed that it was <br>
accidental, but the idiot hadn&#39;t tested it on an isolated network first). A <br>
temporary &quot;condom&quot; was discovered by Rich Kulawiec with &quot;mkdir /tmp/sh&quot;.<br>
<br>
Another fix was to move the C compiler elsewhere.<br></blockquote><div><br></div><div>This comes up every year, but could I ask that you please stop referring to Robert T. Morris as an idiot? He acted foolishly and destructively, yes, but he was quite young at the time and he paid for his mistake. He&#39;s gone on to do very good work in systems and have a productive career; there really is no need to continue to castigate him in this manner for a mistake he made 31 years ago.</div><div><br></div><div>        - Dan C.</div><div><br></div></div></div>
_______________________________________________<br>
COFF mailing list<br>
<a href="mailto:COFF@minnie.tuhs.org" target="_blank">COFF@minnie.tuhs.org</a><br>
<a href="https://minnie.tuhs.org/cgi-bin/mailman/listinfo/coff" rel="noreferrer" target="_blank">https://minnie.tuhs.org/cgi-bin/mailman/listinfo/coff</a><br>
</blockquote></div></div>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature">Sent from a handheld expect more typos than usual</div>

^ permalink raw reply	[flat|nested] 8+ messages in thread

* Re: [TUHS] [COFF] Happy birthday, Morris Worm!
  2019-11-01 21:55   ` [TUHS] [COFF] " Clem Cole
@ 2019-11-01 22:25     ` A. P. Garcia
  0 siblings, 0 replies; 8+ messages in thread
From: A. P. Garcia @ 2019-11-01 22:25 UTC (permalink / raw)
  To: Clem Cole; +Cc: Computer Old Farts Followers, The Eunuchs Hysterical Society

[-- Attachment #1: Type: text/plain, Size: 1785 bytes --]

On Fri, Nov 1, 2019, 5:56 PM Clem Cole <clemc@ccc.com> wrote:

> +1.  Well said Dan.
>
> We all have made and will make mistakes in the future.  It was an error
> and we all learned from it.  It’s not helpful to continue to hark back on
> it.
>
> On Fri, Nov 1, 2019 at 2:13 PM Dan Cross <crossd@gmail.com> wrote:
>
>> On Fri, Nov 1, 2019 at 4:37 PM Dave Horsfall <dave@horsfall.org> wrote:
>>
>>> The infamous Morris Worm was released in 1988; making use of known
>>> vulnerabilities in Sendmail/finger/RSH (and weak passwords), it took out
>>> a
>>> metric shitload of SUN-3s and 4BSD Vaxen (the author claimed that it was
>>> accidental, but the idiot hadn't tested it on an isolated network
>>> first). A
>>> temporary "condom" was discovered by Rich Kulawiec with "mkdir /tmp/sh".
>>>
>>> Another fix was to move the C compiler elsewhere.
>>>
>>
>> This comes up every year, but could I ask that you please stop referring
>> to Robert T. Morris as an idiot? He acted foolishly and destructively, yes,
>> but he was quite young at the time and he paid for his mistake. He's gone
>> on to do very good work in systems and have a productive career; there
>> really is no need to continue to castigate him in this manner for a mistake
>> he made 31 years ago.
>>
>>         - Dan C.
>>
>
The father of the person who wrote the worm was a Unix pioneer, Bob Morris.
He coauthored a paper on Unix password security with Ken Thompson. He was
working for the NSA when the worm was unleashed. As told in The Cuckoo's
Egg, Cliff Stoll was an early suspect, and it caused Bob Morris no small
amount of embarrassment and angst to discover that the culprit was his own
son. I'm sure that Bob was proud of his son's accomplishments -- but not
that one.

[-- Attachment #2: Type: text/html, Size: 2921 bytes --]

<div dir="auto"><br><br><div class="gmail_quote" dir="auto"><div dir="ltr" class="gmail_attr">On Fri, Nov 1, 2019, 5:56 PM Clem Cole &lt;<a href="mailto:clemc@ccc.com" rel="noreferrer noreferrer noreferrer" target="_blank">clemc@ccc.com</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div dir="auto">+1.  Well said Dan.  </div></div><div dir="auto"><br></div><div dir="auto">We all have made and will make mistakes in the future.  It was an error and we all learned from it.  It’s not helpful to continue to hark back on it. </div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Nov 1, 2019 at 2:13 PM Dan Cross &lt;<a href="mailto:crossd@gmail.com" rel="noreferrer noreferrer noreferrer noreferrer" target="_blank">crossd@gmail.com</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div dir="ltr">On Fri, Nov 1, 2019 at 4:37 PM Dave Horsfall &lt;<a href="mailto:dave@horsfall.org" rel="noreferrer noreferrer noreferrer noreferrer" target="_blank">dave@horsfall.org</a>&gt; wrote:<br></div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">The infamous Morris Worm was released in 1988; making use of known <br>
vulnerabilities in Sendmail/finger/RSH (and weak passwords), it took out a <br>
metric shitload of SUN-3s and 4BSD Vaxen (the author claimed that it was <br>
accidental, but the idiot hadn&#39;t tested it on an isolated network first). A <br>
temporary &quot;condom&quot; was discovered by Rich Kulawiec with &quot;mkdir /tmp/sh&quot;.<br>
<br>
Another fix was to move the C compiler elsewhere.<br></blockquote><div><br></div><div>This comes up every year, but could I ask that you please stop referring to Robert T. Morris as an idiot? He acted foolishly and destructively, yes, but he was quite young at the time and he paid for his mistake. He&#39;s gone on to do very good work in systems and have a productive career; there really is no need to continue to castigate him in this manner for a mistake he made 31 years ago.</div><div><br></div><div>        - Dan C.</div></div></div></blockquote></div></div></blockquote></div><div dir="auto"><br></div><div dir="auto">The father of the person who wrote the worm was a Unix pioneer, Bob Morris. He coauthored a paper on Unix password security with Ken Thompson. He was working for the NSA when the worm was unleashed. As told in The Cuckoo&#39;s Egg, Cliff Stoll was an early suspect, and it caused Bob Morris no small amount of embarrassment and angst to discover that the culprit was his own son. I&#39;m sure that Bob was proud of his son&#39;s accomplishments -- but not that one.</div><div class="gmail_quote" dir="auto"></div></div>

^ permalink raw reply	[flat|nested] 8+ messages in thread

* Re: [TUHS] Happy birthday, Morris Worm!
  2019-11-01 21:49 ` [TUHS] " A. P. Garcia
@ 2019-11-02  6:35   ` William Corcoran
  2019-11-02  6:44     ` William Corcoran
  0 siblings, 1 reply; 8+ messages in thread
From: William Corcoran @ 2019-11-02  6:35 UTC (permalink / raw)
  To: A. P. Garcia; +Cc: The Eunuchs Hysterical Society, Computer Old Farts Followers

[-- Attachment #1: Type: text/plain, Size: 1912 bytes --]

Whoa!  Let’s rethink the defamatory ad hominem remarks here.  We were all kids once.  Moreover, my examination of this subject showed that some of our greatest computer scientists, at the time, went to bat for young Morris.  Moreover, calling RTM a nasty name like that is a shoe that simply doesn’t fit.  My goodness RTM is a professor at MIT.   It’s inarguable that the Morris Worm helped his career far more than it hurt it.  Plus, indeed, there was a genuine re-Morris from RTM.

Bill Corcoran

On Nov 1, 2019, at 5:49 PM, A. P. Garcia <a.phillip.garcia@gmail.com<mailto:a.phillip.garcia@gmail.com>> wrote:



On Fri, Nov 1, 2019, 4:37 PM Dave Horsfall <dave@horsfall.org<mailto:dave@horsfall.org>> wrote:
The infamous Morris Worm was released in 1988; making use of known
vulnerabilities in Sendmail/finger/RSH (and weak passwords), it took out a
metric shitload of SUN-3s and 4BSD Vaxen (the author claimed that it was
accidental, but the idiot hadn't tested it on an isolated network first). A
temporary "condom" was discovered by Rich Kulawiec with "mkdir /tmp/sh".

Another fix was to move the C compiler elsewhere.

-- Dave

One of my comp sci professors was a grad student at Cornell when this happened. He shared a small office with Morris and some other students. He said that he had to explain that he had absolutely nothing to do with it on quite a few occasions.

Morris was caught partly because he used the Unix crypt command to encrypt his source code. The command was a computer model of the Enigma machine, and its output could be and indeed was cracked, after retrieving the encrypted code from a backup tape.

It's interesting that the worm was quickly detected. The reason was that it kept infecting the same machines, and as you referred to, it contained a password cracker, which slowed those machines to a crawl because of the multiple instances running.

[-- Attachment #2: Type: text/html, Size: 3030 bytes --]

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body dir="auto">
<div dir="ltr"><span></span></div>
<div dir="ltr">
<div dir="ltr"></div>
<div dir="ltr">Whoa! &nbsp;Let’s rethink the defamatory ad hominem remarks here. &nbsp;We were all kids once. &nbsp;Moreover, my examination of this subject showed that some of our greatest computer scientists, at the time, went to bat for young Morris. &nbsp;Moreover, calling
 RTM a nasty name like that is a shoe that simply doesn’t fit. &nbsp;My goodness RTM is a professor at MIT. &nbsp; It’s inarguable that the Morris Worm helped his career far more than it hurt it. &nbsp;Plus, indeed, there was a genuine re-Morris from RTM. &nbsp;</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">Bill Corcoran&nbsp;</div>
<div dir="ltr"><br>
On Nov 1, 2019, at 5:49 PM, A. P. Garcia &lt;<a href="mailto:a.phillip.garcia@gmail.com">a.phillip.garcia@gmail.com</a>&gt; wrote:<br>
<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div dir="auto">
<div><br>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Fri, Nov 1, 2019, 4:37 PM Dave Horsfall &lt;<a href="mailto:dave@horsfall.org">dave@horsfall.org</a>&gt; wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
The infamous Morris Worm was released in 1988; making use of known <br>
vulnerabilities in Sendmail/finger/RSH (and weak passwords), it took out a <br>
metric shitload of SUN-3s and 4BSD Vaxen (the author claimed that it was <br>
accidental, but the idiot hadn't tested it on an isolated network first). A <br>
temporary &quot;condom&quot; was discovered by Rich Kulawiec with &quot;mkdir /tmp/sh&quot;.<br>
<br>
Another fix was to move the C compiler elsewhere.<br>
<br>
-- Dave<br>
</blockquote>
</div>
</div>
<div dir="auto"><br>
</div>
<div dir="auto">One of my comp sci professors was a grad student at Cornell when this happened. He shared a small office with Morris and some other students. He said that he had to explain that he had absolutely nothing to do with it on quite a few occasions.&nbsp;</div>
<div dir="auto"><br>
</div>
<div dir="auto">Morris was caught partly because he used the Unix crypt command to encrypt his source code. The command was a computer model of the Enigma machine, and its output could be and indeed was cracked, after retrieving the encrypted code from a backup
 tape.</div>
<div dir="auto"><br>
</div>
<div dir="auto">It's interesting that the worm was quickly detected. The reason was that it kept infecting the same machines, and as you referred to, it contained a password cracker, which slowed those machines to a crawl because of the multiple instances running.</div>
<div dir="auto">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
</blockquote>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</body>
</html>

^ permalink raw reply	[flat|nested] 8+ messages in thread

* Re: [TUHS] Happy birthday, Morris Worm!
  2019-11-02  6:35   ` William Corcoran
@ 2019-11-02  6:44     ` William Corcoran
  2019-11-02  7:31       ` A. P. Garcia
  0 siblings, 1 reply; 8+ messages in thread
From: William Corcoran @ 2019-11-02  6:44 UTC (permalink / raw)
  To: A. P. Garcia; +Cc: The Eunuchs Hysterical Society, Computer Old Farts Followers

[-- Attachment #1: Type: text/plain, Size: 2104 bytes --]

My comments were not directed to A. P. Garcia.

I regret my error.

Bill Corcoran



On Nov 2, 2019, at 2:36 AM, William Corcoran <wlc@jctaylor.com<mailto:wlc@jctaylor.com>> wrote:

Whoa!  Let’s rethink the defamatory ad hominem remarks here.  We were all kids once.  Moreover, my examination of this subject showed that some of our greatest computer scientists, at the time, went to bat for young Morris.  Moreover, calling RTM a nasty name like that is a shoe that simply doesn’t fit.  My goodness RTM is a professor at MIT.   It’s inarguable that the Morris Worm helped his career far more than it hurt it.  Plus, indeed, there was a genuine re-Morris from RTM.

Bill Corcoran

On Nov 1, 2019, at 5:49 PM, A. P. Garcia <a.phillip.garcia@gmail.com<mailto:a.phillip.garcia@gmail.com>> wrote:



On Fri, Nov 1, 2019, 4:37 PM Dave Horsfall <dave@horsfall.org<mailto:dave@horsfall.org>> wrote:
The infamous Morris Worm was released in 1988; making use of known
vulnerabilities in Sendmail/finger/RSH (and weak passwords), it took out a
metric shitload of SUN-3s and 4BSD Vaxen (the author claimed that it was
accidental, but the idiot hadn't tested it on an isolated network first). A
temporary "condom" was discovered by Rich Kulawiec with "mkdir /tmp/sh".

Another fix was to move the C compiler elsewhere.

-- Dave

One of my comp sci professors was a grad student at Cornell when this happened. He shared a small office with Morris and some other students. He said that he had to explain that he had absolutely nothing to do with it on quite a few occasions.

Morris was caught partly because he used the Unix crypt command to encrypt his source code. The command was a computer model of the Enigma machine, and its output could be and indeed was cracked, after retrieving the encrypted code from a backup tape.

It's interesting that the worm was quickly detected. The reason was that it kept infecting the same machines, and as you referred to, it contained a password cracker, which slowed those machines to a crawl because of the multiple instances running.

[-- Attachment #2: Type: text/html, Size: 3542 bytes --]

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body dir="auto">
<div dir="ltr"></div>
<div dir="ltr">My comments were not directed to A. P. Garcia.</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">I regret my error.</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">Bill Corcoran&nbsp;</div>
<div dir="ltr"><br>
</div>
<div dir="ltr"><br>
</div>
<div dir="ltr"><br>
On Nov 2, 2019, at 2:36 AM, William Corcoran &lt;<a href="mailto:wlc@jctaylor.com">wlc@jctaylor.com</a>&gt; wrote:<br>
<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div dir="ltr"><span></span></div>
<div dir="ltr">
<div dir="ltr"></div>
<div dir="ltr">Whoa! &nbsp;Let’s rethink the defamatory ad hominem remarks here. &nbsp;We were all kids once. &nbsp;Moreover, my examination of this subject showed that some of our greatest computer scientists, at the time, went to bat for young Morris. &nbsp;Moreover, calling
 RTM a nasty name like that is a shoe that simply doesn’t fit. &nbsp;My goodness RTM is a professor at MIT. &nbsp; It’s inarguable that the Morris Worm helped his career far more than it hurt it. &nbsp;Plus, indeed, there was a genuine re-Morris from RTM. &nbsp;</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">Bill Corcoran&nbsp;</div>
<div dir="ltr"><br>
On Nov 1, 2019, at 5:49 PM, A. P. Garcia &lt;<a href="mailto:a.phillip.garcia@gmail.com">a.phillip.garcia@gmail.com</a>&gt; wrote:<br>
<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div dir="auto">
<div><br>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Fri, Nov 1, 2019, 4:37 PM Dave Horsfall &lt;<a href="mailto:dave@horsfall.org">dave@horsfall.org</a>&gt; wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
The infamous Morris Worm was released in 1988; making use of known <br>
vulnerabilities in Sendmail/finger/RSH (and weak passwords), it took out a <br>
metric shitload of SUN-3s and 4BSD Vaxen (the author claimed that it was <br>
accidental, but the idiot hadn't tested it on an isolated network first). A <br>
temporary &quot;condom&quot; was discovered by Rich Kulawiec with &quot;mkdir /tmp/sh&quot;.<br>
<br>
Another fix was to move the C compiler elsewhere.<br>
<br>
-- Dave<br>
</blockquote>
</div>
</div>
<div dir="auto"><br>
</div>
<div dir="auto">One of my comp sci professors was a grad student at Cornell when this happened. He shared a small office with Morris and some other students. He said that he had to explain that he had absolutely nothing to do with it on quite a few occasions.&nbsp;</div>
<div dir="auto"><br>
</div>
<div dir="auto">Morris was caught partly because he used the Unix crypt command to encrypt his source code. The command was a computer model of the Enigma machine, and its output could be and indeed was cracked, after retrieving the encrypted code from a backup
 tape.</div>
<div dir="auto"><br>
</div>
<div dir="auto">It's interesting that the worm was quickly detected. The reason was that it kept infecting the same machines, and as you referred to, it contained a password cracker, which slowed those machines to a crawl because of the multiple instances running.</div>
<div dir="auto">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
</blockquote>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
</body>
</html>

^ permalink raw reply	[flat|nested] 8+ messages in thread

* Re: [TUHS] Happy birthday, Morris Worm!
  2019-11-02  6:44     ` William Corcoran
@ 2019-11-02  7:31       ` A. P. Garcia
  0 siblings, 0 replies; 8+ messages in thread
From: A. P. Garcia @ 2019-11-02  7:31 UTC (permalink / raw)
  To: William Corcoran
  Cc: The Eunuchs Hysterical Society, Computer Old Farts Followers

[-- Attachment #1: Type: text/plain, Size: 1103 bytes --]

On Sat, Nov 2, 2019, 2:44 AM William Corcoran <wlc@jctaylor.com> wrote:

> My comments were not directed to A. P. Garcia.
>
> I regret my error.
>
> Bill Corcoran
>
>
>
> On Nov 2, 2019, at 2:36 AM, William Corcoran <wlc@jctaylor.com> wrote:
>
> Whoa!  Let’s rethink the defamatory ad hominem remarks here.  We were all
> kids once.  Moreover, my examination of this subject showed that some of
> our greatest computer scientists, at the time, went to bat for young
> Morris.  Moreover, calling RTM a nasty name like that is a shoe that simply
> doesn’t fit.  My goodness RTM is a professor at MIT.   It’s inarguable that
> the Morris Worm helped his career far more than it hurt it.  Plus, indeed,
> there was a genuine re-Morris from RTM.
>
> Bill Corcoran
>
> <snip>

No worries. It's worth mentioning on a Unix mailing list that RTM
coauthored xv6, an x86 reimplementation of the v6 kernel. It sort of
carries the torch of the Lions book by teaching future generations about
the internals of operating systems and the Unix way. And that is a
beautiful thing.

>

[-- Attachment #2: Type: text/html, Size: 2555 bytes --]

<div dir="auto"><div><br><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sat, Nov 2, 2019, 2:44 AM William Corcoran &lt;<a href="mailto:wlc@jctaylor.com" target="_blank" rel="noreferrer">wlc@jctaylor.com</a>&gt; wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">



<div dir="auto">
<div dir="ltr"></div>
<div dir="ltr">My comments were not directed to A. P. Garcia.</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">I regret my error.</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">Bill Corcoran </div>
<div dir="ltr"><br>
</div>
<div dir="ltr"><br>
</div>
<div dir="ltr"><br>
On Nov 2, 2019, at 2:36 AM, William Corcoran &lt;<a href="mailto:wlc@jctaylor.com" rel="noreferrer noreferrer" target="_blank">wlc@jctaylor.com</a>&gt; wrote:<br>
<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div dir="ltr"><span></span></div>
<div dir="ltr">
<div dir="ltr"></div>
<div dir="ltr">Whoa!  Let’s rethink the defamatory ad hominem remarks here.  We were all kids once.  Moreover, my examination of this subject showed that some of our greatest computer scientists, at the time, went to bat for young Morris.  Moreover, calling
 RTM a nasty name like that is a shoe that simply doesn’t fit.  My goodness RTM is a professor at MIT.   It’s inarguable that the Morris Worm helped his career far more than it hurt it.  Plus, indeed, there was a genuine re-Morris from RTM.  </div>
<div dir="ltr"><br>
</div>
<div dir="ltr">Bill Corcoran </div></div></div></blockquote></div></blockquote></div></div><div dir="auto">&lt;snip&gt;</div><div dir="auto"><br></div><div dir="auto">No worries. It&#39;s worth mentioning on a Unix mailing list that RTM coauthored xv6, an x86 reimplementation of the v6 kernel. It sort of carries the torch of the Lions book by teaching future generations about the internals of operating systems and the Unix way. And that is a beautiful thing.</div><div dir="auto"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto"><blockquote type="cite"><div dir="ltr"><div dir="ltr"><blockquote type="cite"><div dir="ltr"><div dir="auto">
<div dir="auto">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
</blockquote>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
</div>

</blockquote></div></div></div>

^ permalink raw reply	[flat|nested] 8+ messages in thread

end of thread, back to index

Thread overview: 8+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-11-01 20:36 [TUHS] Happy birthday, Morris Worm! Dave Horsfall
2019-11-01 21:12 ` Dan Cross
2019-11-01 21:55   ` [TUHS] [COFF] " Clem Cole
2019-11-01 22:25     ` A. P. Garcia
2019-11-01 21:49 ` [TUHS] " A. P. Garcia
2019-11-02  6:35   ` William Corcoran
2019-11-02  6:44     ` William Corcoran
2019-11-02  7:31       ` A. P. Garcia

The Unix Heritage Society mailing list

Archives are clonable: git clone --mirror http://inbox.vuxu.org/tuhs

Example config snippet for mirrors

Newsgroup available over NNTP:
	nntp://inbox.vuxu.org/vuxu.archive.tuhs


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git