[HECnet] Security hole in CSWS

Paul Koning wrote: Excerpt of message (sent 22 September 2009) by Johnny Billquist: Mark Wickens wrote: Hope you guys don't mind but I mentioned this to the Hoff and he pointed out that a period '.' can be used validly instead of a ';' as a separator between the version number and the filename. Indeed. You can also use <> instead of [] as directory brackets. All because of confusion within DEC at the time when they tried to decide on a standard for all DEC OSes. The reason for avoiding [] is that those are "national characters" -- they might be letters with umlauts or stuff like that, in the ancient days of non-English 7-bit character sets. Latin-1 obsoleted that notion. But until that happened, there was an internal DEC directive to avoid those code points... []{}\_|# and perhaps even $... A few people paid attention, most (like RSTS) just ignored it. Indeed. But after a while I got used to reading DB0: 120,114 :-) Johnny -- Johnny Billquist || "I'm on a bus || on a psychedelic trip email: bqt at softjar.se || Reading murder books pdp is alive! || tryin' to stay hip" - B. Idol