🚀 go-pugleaf

In article <ratner.720811773@ficus.cs.ucla.edu> ratner@ficus.cs.ucla.edu (Dave "Van Damme" Ratner) writes:
> Yes, it is true that root never needs to know a user's password ---
> root can always su to the user without knowing the password.

Not if root is trying to debug a problem in login or rlogin where the user's
password is entered. I had one case where a user's password included a pound
sign... which worked fine on the Suns but he couldn't login on Xenix for some
reason.

Generally I get the *user* to type in his password in cases like this, and
make a point of not watching. If I  ask the user his password it's always in
person and I tell them to change it immediately.

This sort of social engineering attack is hard to foil in the general case.
See alt.shenanigans for more ideas... :->
-- 
% Peter da Silva % 77487-5012 % +1 713 274 5180 %
true(<<VV$@\\$'&O 9$O%'$LT$&$"V6"$&$<4$?'&$ #I&&?$=$<<@)24 24 scale 3 21 moveto
{dup 36 eq{pop not}{dup 7 and 4 sub exch 56 and 8 div 4 sub 2 index{rlineto}{
rmoveto}ifelse}ifelse}forall stroke pop showpage % Har du kramat din varg idag?