On Sat, Jul 10, 1999, Mark Murray wrote: > > I used to run a public shell machine, and one of my users cracked > > someone else's site. Identd made it much easier to figure out who the > > problem user was. > > That represents tiny percentage of identd use. The rest is noise. > > Pidentd+DES _is_ useful in the situation you mention above. It is > on average useless to most security folk, as it can also be used > to obfuscate the problem. Crack root on the box, and identd is no > longer trustworthy.
You have an interesting point, however, once a user gains root access, nothing on the machine should be considered trustworthy. -- Chris Costello <ch...@calldei.com> If a train station is where the train stops, what is a work station? To Unsubscribe: send mail to majord...@freebsd.org with "unsubscribe freebsd-hackers" in the body of the message
