Subject: Re: bin/29720
To: None <gnats-admin@netbsd.org, netbsd-bugs@netbsd.org>
From: Igor Sobrado <igor@string1.ciencias.uniovi.es>
List: netbsd-bugs
Date: 03/25/2005 12:47:02
The following reply was made to PR bin/29720; it has been noted by GNATS.

From: Igor Sobrado <igor@string1.ciencias.uniovi.es>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: bin/29720
Date: Fri, 25 Mar 2005 13:46:20 +0100

 I did not answer to issue number 2 in the previous email.  IMHO, printing
 the "NetBSD/$arch ($hostname) ($tty)" banner _after_ logging to the system
 is a requirement to make the computer system more secure.
 
 Sadly, we cannot trust on people with access to Internet.  Information
 provided in that banner can be helpful to both system managers and
 users (it is a way to track how updated is a system and where we are
 connected -what tty we are using for a given connection-), but it is
 a powerful tool for crackers too; consequently, this information should
 not be provided before authenticating users.  :-(
 
 Igor.