[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: gdm Create User



Le dimanche 07 octobre 2007 à 10:00 -0400, Steve Grubb a écrit :

> A successful account breach requires 3 things: a machine name, a valid 
> account, and the password. Letting people know that an account is valid cuts 
> the attack down to a dictionary attack.

However account names are terribly predictible anyway, so hiding them
helps little. Script kiddies routinely scan ssh ports with common
surnames, hoping to find accounts with no passwords.

Also a lot of people use account names in public mails, so…

-- 
Nicolas Mailhot

Attachment: signature.asc
Description: Ceci est une partie de message numériquement signée


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]