Date: Sat, 19 Jan 2002 17:34:59 +0000 From: Mark Murray <mark@grondar.za> To: "Andrey A. Chernov" <ache@nagual.pp.ru> Cc: Kris Kennaway <kris@obsecurity.org>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/lib/libpam/modules/pam_opie pam_opie.c Message-ID: <200201191734.g0JHYxt22723@grimreaper.grondar.org> In-Reply-To: <20020119164924.GE10976@nagual.pp.ru> ; from "Andrey A. Chernov" <ache@nagual.pp.ru> "Sat, 19 Jan 2002 19:49:24 %2B0300." References: <20020119164924.GE10976@nagual.pp.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
> > Nope. The hash is based on things that don't change very often, so it > > will be constant for most attacks. As the intruder is not sucessfully > > breaking in, there MUST BE NO decrement. > > But if intruder sees constant code several days and the next day number > jumps to another value non smoothly, it clearly indicates non-real user > behaviour for him. Many attackers will find a dormant account very attractive. This is called a "honey pot", and it is a good way to waste their time. M -- o Mark Murray \_ FreeBSD Services Limited O.\_ Warning: this .sig is umop ap!sdn To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200201191734.g0JHYxt22723>