3 ms·
One of the citations, http://catless.ncl.ac.uk/Risks/4.73.html#subj10.1 http://catless.ncl.ac.uk/Risks/4.73.html#subj10.1 has more information about the inciden
by spijdar 6y ago
One of the citations, http://catless.ncl.ac.uk/Risks/4.73.html#subj10.1 http://catless.ncl.ac.uk/Risks/4.73.html#subj10.1 has more information about the incident, and some interesting insight from Mr. Hubbard.
"I have to wonder what other RPC services are open holes. We've managed to do some interesting, unauthorized, things with the YP service here at Berkeley, I wonder what the implications of this are."
Some early reflections on "Wow, these very complex and mostly unprotected directory services are just sitting open to anyone connected to the Internet to access! Gee, I hope someone doesn't abuse YP/AD/SMB/DNS down the line..."
- H8crilA 6y ago33 years later and the backbone of the Internet - BGP - is still the no-permissions mess. Exactly as described in the snippet above.
- philprx 6y agoFor context, since YP leads to many different meaning, it's the Yellow Pages service(s) that (Sun) RPCs were enabling. Indeed these were famously abused in these early having days.