From emf@pls.com  Tue Aug 27 00:10:27 1996
Received: from eden.pls.com (eden.pls.com [192.246.50.50]) by suburbia.net (8.7.4/Proff-950810) with ESMTP id AAA13816 for <best-of-security@suburbia.net>; Tue, 27 Aug 1996 00:10:00 +1000
Received: from san-marcos.pls.com (san-marcos.pls.com [192.246.50.151]) by eden.pls.com (8.7.5/8.6.13/pls1.0) with ESMTP id KAA15449; Mon, 26 Aug 1996 10:08:57 -0400 (EDT)
Received: from san-marcos (localhost [127.0.0.1]) by san-marcos.pls.com (8.7.5/8.6.13/pls1.0) with SMTP id KAA23829; Mon, 26 Aug 1996 10:08:57 -0400 (EDT)
Sender: emf@pls.com
Message-ID: <3221AFF8.4738@pls.com>
Date: Mon, 26 Aug 1996 10:08:56 -0400
From: Erik Fichtner <emf@pls.com>
Organization: Systems Administrator, Personal Library Software
X-Mailer: Mozilla 2.0 (X11; U; SunOS 5.3 sun4m)
MIME-Version: 1.0
To: best-of-security@suburbia.net
Subject: Re: BoS: cfingerd
References: <Pine.HPP.3.91.960826134551.2223B-100000@vayu.hss.hns.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

> > static char buf[80];
> > main () {
> >   fgets (buf, 70, stdin);
> >   printf ("canned message...\n");
> >   fflush (stdout); sleep (1);
> >   exit (0);
> > }
> >
> I am not sure  what this code has got to do with cfingerd.(????)
> 
> Or is it kind of sarcastic comment and I am not able to understand.

It's sarcasm.    and it's fairly secure, assuming that no one comes
up with a buffer overflow for fgets();..    dunno why it's even
bothering to get the username its sent since it's not doing anything
with it.   bad hobbit. no biscuit.