gdm Create User
Matthew Miller
mattdm at mattdm.org
Sun Oct 7 12:58:32 UTC 2007
On Sun, Oct 07, 2007 at 02:26:51PM +0200, Lubomir Kundrak wrote:
> Knowing that an user exists or not is in principle about the same
> dangerous as knowing whether a machine is up or not. Or should we
> declare ping to be a security threat?
This isn't true. Many attack vectors require knowing an exist account name.
--
Matthew Miller mattdm at mattdm.org <http://mattdm.org/>
Boston University Linux ------> <http://linux.bu.edu/>
More information about the fedora-devel-list
mailing list