171–180 of 200 posts
Earlier quoted context omitted.
That day our tech chief at the time came running and told us about the worm, and that apparently our country managed to avoid it because the news spread quickly enough that one guy simply unplugged the whole country from the Internet - there was only a single connection back then. (!)
Which country?
https://snl.no/Pål_Spilling#:~:text=Da%20Spilling%20kuttet%2...
The 10% number is completely made up. According to Paul Graham, "I was there when this statistic was cooked up, and this was the recipe: someone guessed that there were about 60,000 computers attached to the Internet, and that the worm might have infected ten percent of them."
That figure is probably UUCP mostly not live connected hosts. I could be wrong, but 60k hosts that you could telnet to sounds like a lot of ducking hosts back then. I was there too, in my late teens. God bless PG.
I assume you all know that Robert Morris is one of the YC (and Viaweb) cofounders? [1] Together with Paul Graham, Jessica Livingston, and Trevor Blackwell. [1] https://en.wikipedia.org/wiki/Robert_Tappan_Morris
He also is (or was) an HN user. No comments in quite some time though. I wish he did post here more. https://news.ycombinator.com/user?id=rtm
This one is before my time, but I remember the blaster worm very clearly.
He was sentenced to pay $10,050, today he would not get away that easily I guess...
Another thing I didn't know (citing Wikipedia):
"In 1995, Morris cofounded Viaweb with Paul Graham, a start-up company that made software for building online stores. It would go on to be sold to Yahoo for $49 million[14], which renamed the software Yahoo! Store. "
and (same source):
"He is a longtime friend and collaborator of Paul Graham. Along with cofounding two companies with him, Graham dedicated his book ANSI Common Lisp to Morris and named the programming language that generates the online stores' web pages RTML (Robert T. Morris Language) in his honor."
I followed his course 6.5840 on distributed systems ( https://pdos.csail.mit.edu/6.824/ , YouTube videos at https://youtube.com/playlist?list=PLrw6a1wE39_tb2fErI4-WkMbs... ) and completed the labs. One day, out of curiosity, I looked up his name. Then I realized what a legend he is. Great course by the way.
Would be cool if he adds a session on how to hack distributed system in 1988...
Earlier quoted context omitted.
Well, sort of. RTM underestimated the effect of exponential growth, and thought that he would in effect have an account on all of the connected systems, without permission. He evidently didn't intend to use this power for evil, just to see if it could be done. He did do us all a service; people back then didn't seem to realize that buffer overflows were a security risk. The model people had then, including my old bos…
Interestingly, it took another 7 years for stack overflows to be taken seriously, despite a fairly complete proof of concept widely written about. For years, pretty much everybody slept on buffer overflows of all sorts; if you found an IFS expansion bug in an SUID, you'd only talk about it on hushed private mailing lists with vendor security contacts, but nobody gave a shit about overflows. It was Thomas Lopatic and…
https://seclists.org/bugtraq/1995/Feb/109
> we've installed the NCSA HTTPD 1.3 on our WWW server (HP9000/720, HP-UX 9.01) and I've found, that it can be tricked into executing shell commands. Actually, this bug is similar to the bug in fingerd exploited by the internet worm. The HTTPD reads a maximum of 8192 characters when accepting a request from port 80.