Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 5 Dec 1997 17:29:46 -0800 (PST)
From:      Alex <garbanzo@hooked.net>
To:        John-Mark Gurney <gurney_j@resnet.uoregon.edu>
Cc:        Jaye Mathisen <mrcpu@cdsnet.net>, Jim Bryant <jbryant@unix.tfs.net>, ircadmin@shellnet.co.uk, freebsd-hackers@freebsd.org
Subject:   Re: Telnet Root access
Message-ID:  <Pine.BSF.3.96.971205172907.765A-100000@zippy.dyn.ml.org>
In-Reply-To: <19971205163751.03734@hydrogen.nike.efn.org>

next in thread | previous in thread | raw e-mail | index | archive | help


On Fri, 5 Dec 1997, John-Mark Gurney wrote:

> Jaye Mathisen scribbled this message on Dec 5:
> > 
> > 
> > > man su
> > > 
> > 
> > I'm not sure how I see su helping.  If he has to telnet in as a normal
> > user, then su to root, he still has to send the root password in the
> > clear.
> 
> what it prevents is brute force password attempts to directly break
> root's acount...

Actually it doesn't really even prevent that.  Su just adds more detailed
logging of the attempts, which are more likely (IMO) to draw attention.

- alex




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.971205172907.765A-100000>