Good lessons for later years, but anachronistic in this context :-) It included a surprisingly short (400ish?) password entry table to try, but they were poorl

Good lessons for later years, but anachronistic in this context :-) It included a surprisingly short (400ish?) password entry table to try, but they were poorly chosen human passwords - I don't recall much being popular enough to even have default passwords. As for security patches - I don't know if there was evidence, but given the not-previously-known exploits it did use, we figured that the previous week's ftpd release (with a bunch of features to bury the obvious-in-retrospect buffer overrun fixes) was a trigger for launching early, before any of the other holes got discovered. (The vulnerabilities were known conceptually but these specific places and ways of exploiting them, not so much.)