** Reply to message from Bill Piety <[EMAIL PROTECTED]> on Sun, 18 Feb 2001
11:57:37 -0600


> What a scary thread this is. I never realized it could be so easy to
> take control of someone's Linux box. Or did I miss a key element of the
> discussion? Why even have a password at all?

To perform this operation, you need to have physical access to the machine
since you cannot otherwise halt the machine without root access (unless you have
configured sudo). Assuming not everyone in your organization has physical access
to the machine, this isn't actually a security hole.

John LeMay Jr.
Senior Enterprise Consultant
NJMC, LLC.


[tag] I love deadlines. I like the whooshing sound they make as they fly by.  - 
Douglas Adams

Reply via email to