From: Dietmar Kuehl (dietmar_kuehl_at_[hidden])
Date: 2000-07-17 12:47:50
> I just did a test. Trying ssh with an invalid username gives exactly
> same error message as a correct username but wrong password. Not very
... which is, of course, intentional: The goal is to give a minimum of
information to people trying to hack a system. Knowing which names are
valid is more information than necessary. The knowledge that log in
failed is sufficient.
Do You Yahoo!?
Get Yahoo! Mail Free email you can access from anywhere!
Boost list run by bdawes at acm.org, gregod at cs.rpi.edu, cpdaniel at pacbell.net, john at johnmaddock.co.uk