It was much worse than that.<p>Back when I was a summer intern at Sun in 1987, it was common knowledge among the engineers at Sun that NFS stood for &quot;No File Security&quot;, and the rpc mount protocol would trust the client to tell the server its host name, which the server would look up in &#x2F;etc&#x2F;exports to decide how much to trust it.<p>So if you know that Scott McNealy&#x27;s workstation&#x27;s name was &quot;doober&quot; (which it was), and it gave permission to a server named &quot;mama&quot;, then on any workstation you could type:<p>% hostname mama; mount doober:&#x2F;usr &#x2F;mnt; hostname `hostname`<p>And you&#x27;d have Scott McNealy&#x27;s &#x2F;usr file system mounted.<p>This also worked over the internet!