Path: utzoo!attcan!uunet!husc6!mailrus!cwjcc!hal!nic.MR.NET!tank!nucsrl!gore
From: gore@eecs.nwu.edu (Jacob Gore)
Newsgroups: news.sysadmin
Subject: Re: UK press reports of Internet worm
Message-ID: <3790003@eecs.nwu.edu>
Date: 19 Nov 88 23:45:06 GMT
References: <AWM.88Nov17191155@gould.doc.ic.ac.uk>
Organization: Northwestern U, Evanston IL, USA
Lines: 14

/ news.sysadmin / karn@ka9q.bellcore.com (Phil Karn) / Nov 19, 1988 /

>Try ftping to your own site and
>logging in with your system's various uucp IDs and passwords. If it works,
>you are basically giving read access to most of your files to the whole
>world, since uucp passwords are usually not very secret.  To see if you've
>been hit, run "who /usr/adm/wtmp" and grep for lines of the form
>
>nuucp    ftp17452Nov  3 03:10   (oliver.bloomcounty.org)

This could also mean that oliver.bloomcounty.org is your TCP/UUCP neighbor.

Jacob Gore				Gore@EECS.NWU.Edu
Northwestern Univ., EECS Dept.		{oddjob,gargoyle,att}!nucsrl!gore