[14718] in Athena Bugs
Stray zephyrs
daemon@ATHENA.MIT.EDU (J. Paul Kirby)
Tue Oct 1 11:37:04 1996
To: bugs@MIT.EDU
Cc: mike@MIT.EDU
Date: Tue, 01 Oct 1996 11:36:53 EDT
From: "J. Paul Kirby" <jpkirby@MIT.EDU>
Something has allowed zephyrgrams from one person to another to
be sent to me!
When I logged on, both zwgc and an add I run at login failed
because of a "SERVNAK received." I could still incorporate mail,
though.
Then many minutes later I got the following zwrite from mike to
ktkohl. Neither were logged on to my machine, marinara.
UNAUTHENTIC Personal message at 11:11:12 on Tue Oct 1 1996
From: Michael Decerbo <mike> on PESTO.MIT.EDU
To: ktkohl@ATHENA.MIT.EDU
[text deleted]
Klist revealed:
Ticket file: /tmp/tkt_ttyp4
Principal: jpkirby@ATHENA.MIT.EDU
Issued Expires Principal
Oct 1 09:23:48 Oct 1 19:23:48 krbtgt.ATHENA.MIT.EDU@ATHENA.MIT.EDU
Oct 1 09:23:49 Oct 1 19:23:49 rcmd.marinara@ATHENA.MIT.EDU
Oct 1 09:23:51 Oct 1 19:23:51 afs.athena.mit.edu@ATHENA.MIT.EDU
Oct 1 09:24:14 Oct 1 19:24:14 zephyr.zephyr@ATHENA.MIT.EDU
Oct 1 09:24:17 Oct 1 19:24:17 pop.po9@ATHENA.MIT.EDU
Oct 1 09:24:24 Oct 1 19:24:24 olc.matisse@ATHENA.MIT.EDU
Oct 1 09:24:26 Oct 1 19:24:26 daemon.minos@ATHENA.MIT.EDU
And then another:
UNAUTHENTIC Personal message at 11:13:35 on Tue Oct 1 1996
From: Michael Decerbo <mike> on PESTO.MIT.EDU
To: ktkohl@ATHENA.MIT.EDU
[text deleted]
Then I zwrote mike, realized zwgc failed, ran it, then a few minutes
later got a message from mike sent to me, and then another message
sent to ktkohl.
Since I don't know either of them I think it's pretty unlikely that
my username was unknowingly used in some alias/script/etc. of mike's.
If this is a bug rather than some form of user error, then considering
how personal and sensitive many zephyrs are, it is disturbing to think
that they can fly around like this, however rarely.
Paul Kirby
