[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Why should non-root users have a password?



> If I have a firewall, and I'm the only person who uses my computer, do I
> really have to have a password on my non-root account?
>
> I know the answer is "yes" but -- why?  They can't do anything to my
> machine anyway, except use it.  And due to the firewall that never
> happens anyway.

There is no such thing as a totally secure machine - including your
firewall. Anyone who tells you otherwise is trying to sell you something. So
the question you need to be asking yourself is:

If someone cracks my firewall - what could they (mis)use my computer for?
Your firewall presumably allows outbound traffic so:

How much spam could they send before your ISP detects it and shuts you down?
How many virus' do you want them to send?

Do I need to go on?




Reply to: