Path: utzoo!utgpu!water!watmath!clyde!att!rutgers!mailrus!uflorida!gatech!rayssd!gmp From: gmp@rayssd.ray.com (Gregory M. Paris) Newsgroups: comp.mail.uucp Subject: Problems with uucp accounts without a password. Summary: Boy, is that dumb. Message-ID: <4095@rayssd.ray.com> Date: 3 Oct 88 18:04:02 GMT References: <1988Sep23.105347.652@lsuc.uucp> <2300@att.ATT.COM> Sender: gmp@rayssd.ray.com (Gregory M. Paris @ Raytheon Company, Portsmouth RI) Reply-To: gmp@rayssd.RAY.COM (Gregory M. Paris) Organization: Raytheon Submarine Sandwich Division Lines: 19 In article <2300@att.ATT.COM> jhc@att.ATT.COM (Jonathan Hawbrook-Clark) writes: > is. It is a trivial command to change a machine's nodename, and I > suspect that no-one would thank us if we delivered mail for 'lsuc' to > some schoolkid with a PC who happened to rename hir machine to that > and call us up. So, except in rare cases, we only deliver mail when > we make the call. I want everybody in the ATT.COM domain to know right now that it's not me that's sending them all that abusive mail. It must be some schoolkid with a PC that is calling att and delivering mail that looks like it came from me. After all, it's a trivial command to change a machine's nodename for purposes of illicitly receiving *or sending* mail. This must be why other people put passwords on their uucp accounts. -- Greg Paris {decuac,gatech,necntc,sun,uiucdcs,ukma}!rayssd!gmp I must be here sleepwalking, mustn't I?