I noticed a wierd quirk in telnet on redhat 5.2 that
seems to allow others to verify whether an account name exists
on a linux machine or not. If you telnet into a machine and
use an username that does not exist, you get four attempts
before the telnet session is closed. If the username exists
then you have three attempts before the session is closed.
I know that there are other ways to find out whether
an account exists on a machine or not. But this allows you
verify that an account exists using service that is almost
always running.
[mod: I think we discussed this already. I guess someone almost
fixed it... :-( -- REW]
------------------------------------------------------------------
Suchandra S. Thapa
s-thapa@uchicago.edu
------------------------------------------------------------------
