Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!van-bc!rsoft!mindlink!a708
From: Gord_Wait@mindlink.bc.ca (Gord Wait)
Newsgroups: comp.unix.admin
Subject: Re: mailing to uudecode
Message-ID: <5870@mindlink.bc.ca>
Date: 14 May 91 17:09:02 GMT
Organization: MIND LINK! - British Columbia, Canada
Lines: 23

Well, what fun that was... It is lucky I don't read my mail on a unix machine.
After asking how to use the decode alias under sun4.1.1 sparc unix, I got a few
mail replies saying more or less that the decode alias is a security hole. I
also got one mail message from something or someone called abc@concert.net that
contained ONLY a uuencoded file
that looks like it was supposed to create a file called a /usr/lib/phase.o, and
the hackers come running!

        I think that sun may have fixed the decode problem, because I have
tried to mail myself uuencoded files, and forwarded them to decode, but all
that happens is a "permission denied" error.
        I have not decoded the file from abc@concert.net, so I don't know what
is in it. In any case, the decode alias is toast.
(hey maybe if I install the file.. I could try to catch the hacker... yeah !
then I could write a book about my experience... yeah.. thats the ticket! I
could call it .. the .. the trojans egg!!)
--
Gord Wait
Member of Technical Staff
ASIC Engineering
SMOS Systems
Vancouver Design Center
Gord_Wait@mindlink.UUCP