From mboxrd@z Thu Jan 1 00:00:00 1970 From: dave@horsfall.org (Dave Horsfall) Date: Sun, 14 May 2017 09:01:41 +1000 (EST) Subject: [TUHS] The evolution of Unix facilities and architecture In-Reply-To: <8B3FFD9C-FA5F-434F-A18E-FF59215C6DDD@quintile.net> References: <20170513004423.F3A9C18C099@mercury.lcs.mit.edu> <1494636703.1615694.975085000.13626EAC@webmail.messagingengine.com> <8B3FFD9C-FA5F-434F-A18E-FF59215C6DDD@quintile.net> Message-ID: On Sat, 13 May 2017, Steve Simon wrote: > this is (IMHO) a rather subtle bug, the ones i remember where rather > simpler. is it ok to discuss ancient security holes or is that still bad > manners? Bring it on :-) Any systems still vulnerable (and exposed to the Internet) deserves all that they get. For example, I think I was the first one to mention the SPL bug here (note that I didn't find it); I'm still trying to find that little program which I think was published in a Usenix newsletter and exploited by, err, yours truly... -- Dave Horsfall DTM (VK2KFU) "Those who don't understand security will suffer."