The Holy Grail

was a bit like telnetting, but the user didn’t need a password to login and the commands he could execute once in the other computer were usually very limited.

If it worked, the FTP bug would allow Phoenix to slip in an extra command during the FTP login process. That command would force Spaf’s machine to allow Phoenix to login as anyone he wanted – and what he wanted was to login as someone who had root privileges. The ‘root’ account might be a little obvious if anyone was watching, and it didn’t always have remote access anyway. So he chose ‘daemon’, another commonly root-privileged account, instead.

It was a shot in the dark. Phoenix was fairly sure Spaf would have secured his machine against such an obvious attack, but Electron urged him to give it a try anyway. The FTP bug had been announced throughout the computer security community long ago, appearing in an early issue of Zardoz. Phoenix hesi- tated, but he had run out of ideas, and time.

Phoenix typed:

FTP -i uther.purdue.edu

quote user anonymous

quote cd ~daemon

quote pass anything

The few seconds it took for his commands to course from his suburban home in Melbourne and race deep into the Midwest felt like a lifetime. He wanted Spaf’s machine, wanted Deszip, and wanted this attack to work. If he could just get Deszip, he felt the Australians would be unstoppable.

Spaf’s machine opened its door as politely as a doorman at the Ritz Carlton. Phoenix smiled at his computer. He was in.

It was like being in Aladdin’s cave. Phoenix just sat there, stunned at the bounty which lay before him. It was his, all his. Spaf had megabytes of security files in his directories. Source code for the RTM Internet worm. Source code for the WANK worm. Everything. Phoenix wanted to plunge his hands in each treasure chest and scoop out greedy handfuls, but he resisted