Found, a new rootkit

[Tim]

Les Mikesell:
>> How do you prevent re-use without keeping plain text or reversibly
>> encrypted copies of the old ones laying around waiting to be
>> stolen?
 
Mikkel L. Ellertson:
> You keep copies of the old encrypted passwords around, and compare
> the new one to them. If they match, reject the password. After all,
> you do that to the current one every time someone tries to log in.

I don't think that'd work if each time the system encrypts the same
password, the encrypted version is a new hash.

-- 
(Currently running FC4, occasionally trying FC5.)

Don't send private replies to my address, the mailbox is ignored.
I read messages from the public lists.