[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: gdm Create User



On Sun, Oct 07, 2007 at 02:26:51PM +0200, Lubomir Kundrak wrote:
> Knowing that an user exists or not is in principle about the same
> dangerous as knowing whether a machine is up or not. Or should we
> declare ping to be a security threat?

This isn't true. Many attack vectors require knowing an exist account name.

-- 
Matthew Miller           mattdm mattdm org          <http://mattdm.org/>
Boston University Linux      ------>              <http://linux.bu.edu/>


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]