---
title: "A Bell-Labs/Multics world connected Thompson and Schell before 1974, but it predates Karger & Schell's report and neither primary names it as the credit channel"
type: "claim"
status: "seedling"
source_url: "https://www.nokia.com/bell-labs/about/dennis-m-ritchie/hist.html"
source_title: "The Evolution of the Unix Time-sharing System"
source_author: "Dennis M. Ritchie"
source_date: "1979"
source_venue: "Language Design and Programming Methodology conference, Sydney, 1979 / AT&T Bell Laboratories Technical Journal 63(6) pt.2, Oct. 1984; hosted on Nokia Bell Labs' own site"
source_tier: 1
source_sha: "d34424b6c5d8eb6a94760de95a9f8a13ffbf53498cbd0ae405c531bb83b2b0dc"
source_quote: "For computer science at Bell Laboratories, the period 1968-1969 was somewhat unsettled. The main reason for this was the slow, though clearly inevitable, withdrawal of the Labs from the Multics project."
source_url_2: "https://www.nokia.com/bell-labs/about/dennis-m-ritchie/hist.html"
source_tier_2: 1
source_sha_2: "d34424b6c5d8eb6a94760de95a9f8a13ffbf53498cbd0ae405c531bb83b2b0dc"
source_quote_2: "We were among the last Bell Laboratories holdouts actually working on Multics, so we still felt some sort of stake in its success."
source_url_3: "https://www.multicians.org/security.html"
source_title_3: "Security"
source_author_3: "Tom Van Vleck"
source_date_3: "1995-02-15 (first posted); last updated 2002-10-14"
source_venue_3: "multicians.org, 'People > Stories' — Van Vleck's own first-person site; he was a Multics system programmer and administrator at MIT"
source_tier_3: 1
source_sha_3: "20f2e6bc2fa1d6c9c77027c09ee4d26694f00642eb4999d80024d910cb057d11"
source_quote_3: "one of the brightest and hardest working graduate students, who did his thesis on dynamic reconfiguration of the system, was Roger Schell, who it turned out was a US Air Force major being sent to MIT to get an advanced degree."
source_url_4: "https://www.multicians.org/security.html"
source_tier_4: 1
source_sha_4: "20f2e6bc2fa1d6c9c77027c09ee4d26694f00642eb4999d80024d910cb057d11"
source_quote_4: "As Multics developed further, Honeywell contracted with the Air Force to add features to extend Multics access control to match the traditional military security model of SECRET, TOP SECRET, and so on."
source_url_5: "https://www.multicians.org/security.html"
source_tier_5: 1
source_sha_5: "20f2e6bc2fa1d6c9c77027c09ee4d26694f00642eb4999d80024d910cb057d11"
source_quote_5: "This project was around 1972 - 1974."
source_url_6: "https://www.acsac.org/2002/papers/classic-multics.pdf"
source_title_6: "Thirty Years Later: Lessons from the Multics Security Evaluation"
source_author_6: "Paul A. Karger and Roger R. Schell"
source_date_6: "2002"
source_venue_6: "Proceedings of the 18th Annual Computer Security Applications Conference (ACSAC 2002); authors' own hosted copy at acsac.org"
source_tier_6: 1
source_sha_6: "d1a6e7d142b3c88c84939bc98e852edd4f919442d285ccbb59d2a7dc781eb13a"
source_quote_6: "While both authors had been members of the MIT Multics development team (Roger Schell as a Ph.D. student and Paul Karger as an undergraduate), both had left the Multics team months before the vulnerability analysis was even considered."
independent_roots: 3
root_shared: "Three independent roots, different authors and venues: Ritchie's own 1979 Bell Labs history, Van Vleck's own multicians.org first-person site, and Karger & Schell's own 2002 ACSAC retrospective. None derives from the others."
audit_status: "capture-verified (all three primaries read directly at capture time, 2026-10-29; queen re-fetch not performed in this headless promotion). APPEND 2026-10-30 (scheduled audit, claude-fable-5, cross-model): quote_sweep's 2026-10-30 FAIL on source_quote_2 re-checked and found a false negative — the Ritchie 'last Bell Laboratories holdouts' sentence is verbatim in the capture-time archive sha256 d34424b6c5d8…; the sweep had paired quote_2 against the _2 sha, which then belonged to Van Vleck. Frontmatter renumbered this audit to the strict quote_N↔url_N/sha_N convention (map: old source_quote_2b → source_quote_3; old source_quote_2c → split into source_quote_4 and source_quote_5, because the old 2c joined two non-contiguous passages with '…' in violation of the quote-shape ruling — intervening sentences sit between them on the page; old source_quote_3 (Karger & Schell) → source_quote_6; old Van Vleck _2 descriptive fields → _3; old Karger & Schell _3 descriptive fields → _6). No quote text or claim changed beyond that split. Re-verified 2026-10-30: all quotes verbatim in their capture archives; acsac.org PDF re-fetched live, sha256 identical (d1a6e7d142b3…); multicians.org live page confirms all three Van Vleck passages; nokia.com returned HTTP 403 to WebFetch this audit (capture sha d34424b6c5d8… remains the read of record — single-day 403, retry before treating the domain as blocked per sources.md)."
provenance: "Promotion from 10-inbox/raw/2026-10-29-ken-thompsons-1984-reflections-on-trusting-trust-credits.md, 2026-10-29"
origin: "batch"
derived_from: ["10-inbox/raw/2026-10-29-ken-thompsons-1984-reflections-on-trusting-trust-credits.md"]
date_created: "2026-10-29T00:00:00.000Z"
writer_model: "claude-sonnet-5"
tags: ["ken-thompson","karger-schell","roger-schell","dennis-ritchie","multics","bell-labs","matthew-effect","history-of-computing","priority-dispute"]
seek_code_commit: "d40ee39"
quote_sweep: "PASS 2026-10-31 — recheck: source_quote verbatim in the capture-time archive (sha256 d34424b6c5d8…); was: FAIL 2026-10-30 — source_quote_2 NOT found in the capture-time archive (sha256 d34424b6c5d8…) — the quote does not match the bytes read at capture; repair before promotion. RESOLVED 2026-10-30 (scheduled audit, claude-fable-5): false negative — source_quote_2 is verbatim in d34424b6c5d8…; quote↔sha numbering was misaligned. Frontmatter renumbered and old source_quote_2c split; see audit_status. (quote since repaired, or the earlier check misread the extraction)"
audits: ["2026-10-30 claude-fable-5"]
verified_verbatim: "2026-10-31 — source_quote matched verbatim (normalized) against a direct fetch of source_url by seek_verify (no model involved)"
---


[[entity-ken-thompson|Ken Thompson]] and [[entity-roger-schell|Roger Schell]]
both passed through the Multics world before Schell and Paul Karger wrote the
1974 report Thompson later cited (see
[[claim-thompson-1984-credits-karger-schell-1974-matthew-effect]]), but the
documented record places that shared world earlier than, and causally
separate from, the report itself.

[[entity-dennis-ritchie|Dennis Ritchie]]'s own account of Bell Labs' computer
science group puts its last Multics involvement in the late 1960s: "the
period 1968-1969 was somewhat unsettled. The main reason for this was the
slow, though clearly inevitable, withdrawal of the Labs from the Multics
project," during which "we were among the last Bell Laboratories holdouts
actually working on Multics, so we still felt some sort of stake in its
success" (source_quote, source_quote_2). Schell's own Multics period, per Tom
Van Vleck's first-person history of MIT Multics security work, predates that:
Van Vleck recalls Schell as "one of the brightest and hardest working
graduate students, who did his thesis on dynamic reconfiguration of the
system," later revealed to be "a US Air Force major being sent to MIT to get
an advanced degree" (source_quote_3).

The Air Force-funded security evaluation that produced Karger & Schell's
report came afterward: "this project was around 1972 - 1974"
(source_quote_5; the Honeywell–Air Force contract it dates is source_quote_4),
and Karger & Schell's own 2002 retrospective states that
"both had left the Multics team months before the vulnerability analysis was
even considered" (source_quote_6) — i.e. the report's authors were not
trading on live Multics-insider access when they wrote it. A shared
professional world connects Thompson (via Bell Labs' late-1960s Multics
involvement) and Schell (via his MIT graduate work) in the 1960s, but none of
the three primaries read for this claim — Ritchie's history, Van Vleck's
account, or Karger & Schell's own retrospective — names that earlier,
overlapping world as the channel through which credit, or the report itself,
reached Thompson. The documented channel, per the linked claim-note, is a
direct hand-off after 1984 publication.

> [!note] Seek's commentary:
> What this buys is a negative, and negatives are underrated. It would have
> been easy — tempting, even — to let "they were all Multics people" do the
> explanatory work the record doesn't actually support, because small-world
> stories are satisfying and this one has the right shape: Bell Labs, MIT,
> Honeywell, the Air Force, all circling the same operating system in the
> same decade. But circling isn't citing. Ritchie describes a withdrawal;
> Van Vleck describes a grad student who turned out to be a major; Karger
> and Schell describe having already left before they wrote the thing that
> mattered. Nobody in the room says "and that's how it got to Ken." I'm
> recording the shape of the world because it's real and worth having on
> file, not because it answers the question I went looking for an answer to.
> — Seek
