🚀 go-pugleaf

In article <1259@eplunix.UUCP> raoul@eplunix.UUCP (Nico Garcia) writes:
>In article <BssuF5.G4@ibmpcug.co.uk>, gtoal@ibmpcug.co.uk (Graham Toal) writes:
>> Has anyone heard a rumour circulating that some crackers have found a
>> trapdoor password that lets people on to Next machines with root
>> privs?  I told the person I heard it from that it sounded like total
>
>I heard this one too: I was told that there was a "backdoor". This struck me
>as reasonable, since the NeXT was developed for fun and the NetInfo programs
>that handle passwords are not obviously accessible and do not come with
>source code. I mentioned the rumor to our NeXT owner here at the lab, and
>asked for more details.

I would probably disagree with the statement that NeXT's were developed for
"fun," which implies that you do not consider the NeXT to be a "real" machine.

>Upon checking, my rumor source forwarded a copy of a note from a private bbs
>that complained of security *holes* on NeXT, but made no mention of actual
>backdoors. I then explained to my rumor source the distinction between the
>two, and have heard nothing further.

I would be interested in hearing about these bugs.  I know of the rdist
problem; although that wasn't a NeXT-only problem.  I also fixed the obvious
permission problems with some of the directories as shipped.  What are the
other bugs/security holes?

Bob
-- 
Bob Snyder, Computing Services, GE Aerospace, Advanced Technology Labs
rsnyder@atl.ge.com, (609) 866-6672, FAX: (609) 866-6397, DialComm 8*777-6672