🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.sys.next.misc
Article #3328

Re: Password file

#3328
From: Mike Matthews
Date: Wed, 11 Nov 1992 16:58
17 lines
1259 bytes
In article <BxBIwK.97H@news.cso.uiuc.edu> jeffo@uiuc.edu (J.B. Nicholson-Owens) writes:
>The NeXT password file is not shadowed accessible without even having an  
>account on the system.  You can do remote nidumps of someone else's password  
>file.  Unfortunately making one's password information secure seems to be hard  
>(if not impossible) without changing a MAJOR portion of the operating system  
>(or at least this is what I was told by people on comp.sys.next.* when I asked  
>a similar question).

You can easily fix the problem with remote nidumps (trusted_networks), but it
would take some sort of access listing built right in to NetInfo to change
the greater problem.

>-- Jeff (jeffo@uiuc.edu)
------
Mike Matthews, matthews@oberon.umd.edu (NeXTmail accepted)
------
Diplomacy is the art of saying "nice doggy" until you can find a rock.
Technical Details
Message-ID: <16930@umd5.umd.edu>
Path: arc1-ca.pugleaf.net!sparky!uunet!think.com!ames!haven.umd.edu!umd5!oberon.umd.edu!matthews
References: <83164@ut-emx.uucp> <BxBIwK.97H@news.cso.uiuc.edu>

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!think.com!ames!haven.umd.edu!umd5!oberon.umd.edu!matthews
From: matthews@oberon.umd.edu (Mike Matthews)
Newsgroups: comp.sys.next.misc
Subject: Re: Password file
Message-ID: <16930@umd5.umd.edu>
Date: 11 Nov 92 16:58:39 GMT
References: <83164@ut-emx.uucp> <BxBIwK.97H@news.cso.uiuc.edu>
Sender: news@umd5.umd.edu
Organization: /etc/organization
Lines: 20