|
![](/i/fill.gif) |
On Tue, 17 Nov 2009 20:35:01 -0800, Darren New wrote:
> I've never seen a UNIX system that would say "you can't delete that
> file, but do you know the password to any of these accounts that are in
> the same group as that file? If so, type it in." That would be user
> friendly, and UNIX doesn't like user friendly. ;-)
>
> Actually, it's more like a leak of security information you probably
> shouldn't be leaking. That's a joke.
That's an interesting view, actually - "you don't have permission to do
this so authenticate as one of these users" does seem like a security
breach to me - since it tells a hacker who they need to authenticate as
in order to do 'x', the hacker can concentrate on that account.
Jim
Post a reply to this message
|
![](/i/fill.gif) |