Path: utzoo!utgpu!water!watmath!clyde!att!pacbell!ames!mailrus!uwmcsd1!nic.MR.NET!umn-cs!randy
From: randy@umn-cs.cs.umn.edu (Randy Orrison)
Newsgroups: comp.unix.questions
Subject: Re: good passwords
Message-ID: <6329@umn-cs.cs.umn.edu>
Date: 22 Jul 88 15:33:13 GMT
References: <16436@brl-adm.ARPA> <810022@hpsemc.HP.COM>
Reply-To: randy@umn-cs.UUCP (Randy Orrison)
Organization: Control Data, Arden Hills, Minnesota
Lines: 23

In some unknown article cmiller@sunspot.UUCP (Charlie Miller) writes:
|How about leaving a program running on a terminal, say in a student
|terminal room, that mimics the standard login prompt?  Then just file
|away the user name and password...etc.

Our reaction to this in the University of Minnesota Math Dept. computer lab
was to tell students to turn their terminals off when they were done.  Our
nice Tellab box would disconnect them from the computer and when the terminal
was turned back on re-issue the network prompt.  (Guaranteed real)

Of course, the people running programs like the above wouldn't turn their
terminals off, so the consultants went around turning them off in their spare
time.

We did this in response to problems reported in other labs.  Never had any
trouble in our own.

	-randy
-- 
Randy Orrison, Control Data, Arden Hills, MN
randy@ux.acss.umn.edu	{bungia, uunet!hi-csc, rutgers, sun}!umn-cs!randy
	"I consulted all the sages I could find in Yellow Pages,
	but there aren't many of them."			-APP