From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-0.8 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED, MAILING_LIST_MULTI,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 13458 invoked from network); 30 Jul 2023 17:33:31 -0000 Received: from minnie.tuhs.org (2600:3c01:e000:146::1) by inbox.vuxu.org with ESMTPUTF8; 30 Jul 2023 17:33:31 -0000 Received: from minnie.tuhs.org (localhost [IPv6:::1]) by minnie.tuhs.org (Postfix) with ESMTP id C17EE410B4; Mon, 31 Jul 2023 03:33:25 +1000 (AEST) Received: from mail-qk1-x72e.google.com (mail-qk1-x72e.google.com [IPv6:2607:f8b0:4864:20::72e]) by minnie.tuhs.org (Postfix) with ESMTPS id 3DE2D40BDF for ; Mon, 31 Jul 2023 03:33:16 +1000 (AEST) Received: by mail-qk1-x72e.google.com with SMTP id af79cd13be357-7658752ce2fso229989485a.1 for ; Sun, 30 Jul 2023 10:33:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dartmouth.edu; s=google1; t=1690738394; x=1691343194; h=to:subject:message-id:date:from:mime-version:from:to:cc:subject :date:message-id:reply-to; bh=60SeJe2CRrxtaUCG9X5M39oZUVh8+POrfU/U2BMD/7M=; b=H5WQlSRY9/uZqpnSw7HhSJpw7oDpw7RFf86H31GmxSu+0Bq9kAqNMrbpHNwOeiLHaN nOI3NTcp1EjwImZHnzqr9St8BunV0Fr07yUJEYXWUPyqlimE41Twp6wi7En4oBsrxLOc b3+1ubpO6UO1JQfuPZTa5EpCBhE6NXNN2ZsSH2piThrWolVfrOsSQyLBkofDe4wbTDOD /TvlFWQffUXcmmuA0Qn1EodpEVryGU+W1QWJ4Qw+SKyQtbYJov/YcmhDoAxo8zHXxKFl OWKT4rkX4DFK9t98vLxeMwQzvDf8UVNfVODNGuaJCu+8SJfB76Hf53mRLzrVUkauLOBs RX8Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1690738394; x=1691343194; h=to:subject:message-id:date:from:mime-version:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=60SeJe2CRrxtaUCG9X5M39oZUVh8+POrfU/U2BMD/7M=; b=IdYpgeFaSFu17m3uFsMkhIrMzBrcyxADtt03N/npxqafSCZwA9qQVmMs85qbDIPv+G yCYZZaCGHG3JN3NM8chrjx2BESs8sOrhcm3ESWUSgrAVv/+Mr7DUSct3GwGYkL1MM9oc zH1eTu+lay94cBFATV9SyRwHuHbuG3EcHzvxtK/RJCEWoxMEvxrRPt1BGlpTDUqlgmPI aO1s6zLj3+SbuFhPVnQNkdBQg9zvi5S4XT0gd5ra5tXuztyQVnBjRy3I2rnhsZY18q8B HwVF6WYdNnL1pzSA8kLF71u1/K4MJ/vpadUScNF/dVYtwSzrXjfGuhtgLT2jzXbvzvLo +p9w== X-Gm-Message-State: ABy/qLb1q8B9qxD+Vfy94Xf7bjkU8Uu+Y8GEuGGpIBBV5xsyGeKb/y9t jktrT1Dojz1XHXUVkiT9hPA7j0qzOjASRgX+oMMAP9anUhLS5E+1H1A= X-Google-Smtp-Source: APBJJlFuQGhsnTyxJB3zz1JJq7YxfzkeFKzLhQZB7IcNydrdhZvhU1nrShhFJajOdMhAYDDffRth/HPmLMD+stCeT0g= X-Received: by 2002:a05:620a:402:b0:76c:8611:8cb1 with SMTP id 2-20020a05620a040200b0076c86118cb1mr5944762qkp.76.1690738394560; Sun, 30 Jul 2023 10:33:14 -0700 (PDT) MIME-Version: 1.0 From: Douglas McIlroy Date: Sun, 30 Jul 2023 13:33:00 -0400 Message-ID: To: TUHS main list Content-Type: text/plain; charset="UTF-8" Message-ID-Hash: YMSNSDRCTRFLEJ6XUMRK7KTJNJCRCH6J X-Message-ID-Hash: YMSNSDRCTRFLEJ6XUMRK7KTJNJCRCH6J X-MailFrom: douglas.mcilroy@dartmouth.edu X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.6b1 Precedence: list Subject: [TUHS] Re: Cool talk on Unix and Sendmail history, by Eric Allman List-Id: The Unix Heritage Society mailing list Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: "Lessons learned" overlooked the Morris worm, which exploited not only the unpardonable gets interface, but also the unpardonable back door that Allman built into sendmail. This reminds me of how I agonized over Mike Lesk's refusal to remove remote execution from uucp. (Like Eric, Mike created the feature to help fix the myriad trouble reports these communication facilities stimulated.) It seemed irresponsible to distribute v7 with the feature present, yet the rest of uucp provided an almost indispensable service. The fig leaf for allowing uucp in the distribution was that remote execution was described in the manual. If you didn't like it you could delete or fix uucp. (Sendmail's Trojan horse was undocumented, though visible in the code.) Doug