Path: utzoo!utgpu!water!watmath!clyde!rutgers!cmcl2!nrl-cmf!ames!pasteur!ucbvax!ucdavis!uop!todd
From: todd@uop.edu (Dr. Nethack)
Newsgroups: sci.crypt
Subject: Re: Unix Password Hacker
Summary: well, around here
Message-ID: <1118@uop.edu>
Date: 21 Feb 88 18:41:46 GMT
References: <731@ddsw1.UUCP> <657@morningdew.BBN.COM> <1368@homxc.UUCP> <739@ddsw1.UUCP>
Distribution: na
Organization: Uop Ethernet Gateway
Lines: 26


At this site, there is more a problem of people walking away from their
terminals, and leaving!!  This enables direct password changing, file
robbing, mail reading... etc.

In addition to that there are those who spend time picking passwords of
people they know, and it is fairly easy.  

In other words, a "technical" attack is infrequent.  Those who are good
enough crackers usually end up being TAs and thereby obtaining root access.

A buisness could be something different, say the TI example, where a
random password is assigned.

In another place I worked the new semester was the best time, as all
the new accounts had the password of "nopassword".

So if you played around, you could find some accounts by the lazy people
who did not bother to drop by the lab for the first two weeks.


-----------------------------------------------------------------------
+ uop!todd@uunet.uu.net                                               + 
+                 cogent!uop!todd@lll-winken.arpa                     + 
+                                 {backbone}!ucbvax!ucdavis!uop!todd  + 
-----------------------------------------------------------------------