{
  "port": 1334,
  "protocol": "tcp",
  "service": "AIX writesrv",
  "oneLiner": "AIX's writesrv daemon — accepts remote `write` messages to users' terminals.",
  "whatItIs": "On IBM AIX, writesrv listens on the port named in /etc/services (1334) and handles incoming requests from the `write` command, spawning a server process per request so a user on one host can write messages to a logged-in user's terminal on another. Both hosts must be running the daemon for remote `write` to work. It is an old inetd-era convenience service that AIX hardening guides tell you to disable, and it is the only well-documented user of this port.",
  "exposure": {
    "verdict": "never",
    "note": "IBM's own guidance is to disable writesrv on any system connected to a public network; it accepts unauthenticated terminal messages and offers nothing worth the risk."
  },
  "checkCommand": "lssrc -s writesrv",
  "links": [
    {
      "title": "IBM AIX documentation — writesrv daemon",
      "url": "https://www.ibm.com/docs/ssw_aix_72/w_commands/writesrv.html",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}