Re: sudo security Was: Reporting missing package during install
On Tue 10 Dec 2013 at 18:23:21 +0100, Gian Uberto Lauri wrote:
> yaro@marupa.net writes:
>
> > Not only that, but now whoever seeks to compromise your account has the added
> > challenge of figuring out just what, exactly, the name of the
> > account is.
>
> Usually attackers first try to enter -possibly using a faulty
> service-, then to exploit some vulnerability.
Quite possibly this is a technique which is tried but, in a default
install, Debian does not provide any faulty services.
> And grep is great in
> finding 0:0 accounts :)
The English is fine but I wish I understood the implications of 0:0.
Reply to: