|
Boost : |
From: Dietmar Kuehl (dietmar_kuehl_at_[hidden])
Date: 2000-07-17 12:47:50
Hi,
> I just did a test. Trying ssh with an invalid username gives exactly
> the
> same error message as a correct username but wrong password. Not very
> helpful.
... which is, of course, intentional: The goal is to give a minimum of
information to people trying to hack a system. Knowing which names are
valid is more information than necessary. The knowledge that log in
failed is sufficient.
=====
<mailto:dietmar_kuehl_at_[hidden]>
<http://www.dietmar-kuehl.de/>
__________________________________________________
Do You Yahoo!?
Get Yahoo! Mail Free email you can access from anywhere!
http://mail.yahoo.com/
Boost list run by bdawes at acm.org, gregod at cs.rpi.edu, cpdaniel at pacbell.net, john at johnmaddock.co.uk