Subject: Re: *why* /dev/rnd?
To: None <current-users@NetBSD.ORG>
From: Wolfgang Rupprecht <wolfgang@wsrcc.com>
List: current-users
Date: 10/13/1997 10:42:50
jfw@jfwhome.funhouse.com (John F. Woods) writes:
> [*] The password files under the anon-ftp directory are dummies, of course,
> but (a) they do reveal a few user IDs, and (b) I just want to make life a
> little more difficult for password fishers...
It could work both ways. The /etc/password under ~ftp *could* be
filled with "tripwire" names. Names that are watched for by the the
login programs and flagged as frontal-attack attempts.
I never did bother fully implementing the trip wire aspect. (I only
ever saw breakin attempts to root, uucp, guest).
A few years ago I did have fun generating a password file of
approx. 100 or so "users" that has a nice message that one could read
if one cracked the passwords and read the plaintext passwords in UID
order. I figured that would keep the little kids amused for a
while. ;-)
-wolfgang