North American Network Operators Group|
Date Prev | Date Next |
Date Index |
Thread Index |
Author Index |
RE: 'we should all be uncomfortable with the extent to which luck ..'
- From: Roeland Meyer
- Date: Wed Jul 25 11:52:23 2001
> From: Mitch Halmu [mailto:firstname.lastname@example.org]
> Sent: Wednesday, July 25, 2001 8:30 AM
> On Tue, 24 Jul 2001, Roeland Meyer wrote:
> > How many of us here run anything less than SSH and even
> allow telnetd to
> > live on any of our hosts?>
> Those (few) providers offering shell accounts still do.
Someone once proved to me, definitvely, how easy it is to crack root from a
shell account. Especially one that is allowed to execute their own code.
That night, I killed all shell accounts of users that I didn't personally
know and trust. Those that were left were introduced to SSH. This was