On Tue, 17 Nov 2009 20:35:01 -0800, Darren New wrote:

> I've never seen a UNIX system that would say "you can't delete that
> file, but do you know the password to any of these accounts that are in
> the same group as that file? If so, type it in."  That would be user
> friendly, and UNIX doesn't like user friendly. ;-)
> 
> Actually, it's more like a leak of security information you probably
> shouldn't be leaking. That's a joke.

That's an interesting view, actually - "you don't have permission to do 
this so authenticate as one of these users" does seem like a security 
breach to me - since it tells a hacker who they need to authenticate as 
in order to do 'x', the hacker can concentrate on that account.

Jim

Post a reply to this message