Misc ideas & comments

Rodrigo Ventura yoda@isr.ist.utl.pt
Fri, 27 Mar 1998 22:23:10 +0100 (GMT+0100)

>>>>> "David" == David Tillman <dtillman@cannonexpress.com> writes:

    David>     Comments? How did Lip machines store user info?

        I have a LispM nearby, and I'll never forget the day I
installed TCP/IP and tryed to telnet from a PC to the LispM. The LispM
didn't even ask for user/passwd and gave me a lisp listener. Then, for
fun, I tried "(shutdown)", and it worked! That day I realized I could
never leave the LispM permanently connected to the net. Anyone could
telnet and do the more horrible things to it. Even at the console
there were no passwd. A "(login 'username)" was enought to get into
anyones account.



*** Rodrigo Martins de Matos Ventura, alias <Yoda>
***  yoda@isr.ist.utl.pt, http://www.isr.ist.utl.pt/~yoda
***   Instituto de Sistemas e Robotica, Polo de Lisboa
***    Instituto Superior Tecnico, Lisboa, Portugal
***     PGP Public Key available on my homepage
*** Key fingerprint = 0C 0A 25 58 46 CF 14 99  CF 9C AF 9E 10 02 BB 2A