[10786] in Hotline Meeting
w20-575-48
daemon@ATHENA.MIT.EDU (andrew j. cassidy)
Tue Sep 22 03:12:26 1992
To: hotline@Athena.MIT.EDU
Date: Tue, 22 Sep 92 03:12:10 EDT
From: "andrew j. cassidy" <honor@Athena.MIT.EDU>
has been hacked to accept remote logins.
prompt% last | grep -v ":0.0"
drlcs ttyp2 AIR-TRAFFIC-CONT Mon Sep 21 18:16 - 18:17 (00:00)
disc ttyp3 E51-007-6.MIT.ED Mon Sep 21 18:03 - 18:16 (00:12)
disc ttyp3 E40-008-4.MIT.ED Mon Sep 21 17:51 - 17:52 (00:01)
root ttyp3 M37-318-6.MIT.ED Mon Sep 21 15:17 - 15:17 (00:00)
choral ttyp2 W20-575-48.MIT.E Fri Sep 18 14:48 - 14:51 (00:02)
root ttyp2 W20-575-84.MIT.E Thu Sep 10 20:00 - 20:04 (00:04)
wtmp begins Thu Sep 3 10:07
prompt% more /usr/adm/sulog | grep disc
BADSU: disc /dev/ttyp3 Sat Aug 29 13:47:27 1992
SU: disc /dev/ttyp3 Sat Aug 29 13:47:30 1992
SU: disc /dev/ttyp1 Sat Aug 29 13:50:21 1992
SU: disc /dev/ttyp1 Sun Sep 20 11:07:54 1992
SU: disc /dev/ttyp1 Sun Sep 20 11:13:30 1992
Additionally, as I logged in here, the following appeared in my
console window:
02:52 /usr/athena/bin/xhost: unable to open display ""
I suspect it was part of some lame attempt to make w20-575-48
permanently xhosted.
--andrew cassidy
honor@athena.mit.edu
