Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 25 Mar 1999 10:36:55 -0800 (PST)
From:      Matthew Dillon <dillon@apollo.backplane.com>
To:        James Wyatt <jwyatt@RWSystems.net>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: Kerberos vs SSH
Message-ID:  <199903251836.KAA00989@apollo.backplane.com>
References:   <Pine.BSF.4.05.9903250926290.23152-100000@kasie.rwsystems.net>

next in thread | previous in thread | raw e-mail | index | archive | help

:
:On Thu, 25 Mar 1999, Matthew Dillon wrote:
:	[ ... ]
:>     are still vulnerable.  You can get into the account just fine without 
:>     exposing a password, but once in the account if you need to type a
:>     password of any sort in to do something else, *that* password is
:>     vulnerable to interception.
:
:especially sudo and su... - Jy@

    We used sudo for a little while 3 years ago, but I decided that it was
    too big a security risk and wiped it.  sudo is one of the stupidest
    programs I've ever seen.
    
					-Matt
					Matthew Dillon 
					<dillon@backplane.com>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199903251836.KAA00989>