home *** CD-ROM | disk | FTP | other *** search
- Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU
- Path: sparky!uunet!utcsri!torn!spool.mu.edu!uwm.edu!zaphod.mps.ohio-state.edu!howland.reston.ans.net!paladin.american.edu!auvm!JET.UK!PS
- Message-ID: <9212231526.AA14967@ypmaster.jet.uk>
- Newsgroups: bit.listserv.banyan-l
- Date: Wed, 23 Dec 1992 14:59:44 GMT
- Sender: Banyan Networks Discussion List <BANYAN-L@AKRONVM.BITNET>
- From: ps@JET.UK
- Subject: Passwords - Why Bother!
- Lines: 47
-
- Following on from the "you can change your password without and checks using
- MUSER fiasco" comes the new VINES security breach!
-
- Why bother with passwords at all ..........
-
- Here's what you do . . .
-
- Find a Macintosh (1.2 or 1.3b6 software)
-
- If it is already logged in, select the Chooser and click on logout.
-
- Now you are logged out, click on login this will present you with a login
- screen complete with the name of the user already thoughtfully typed in for
- you.
-
- Randomly type a few characters on the keyboard, and press return.
-
- Wait a few seconds for VINES to inform you that you are logged in.
-
- This is fully repeatable!
-
- I trust that all you fellow system administators sleep well over Christmas,
- knowing that your PHYSICAL access is secure!
-
- Fellow Banyan administrators, please try to repeat this, and plague Banyan
- fast! This is already common knowledge here and MUST be fixed ASAP before it
- becomes abused, it could already be affecting you, without you realising it.
- The UK is virtually shut down until the 4th Jan, this was reported on the 18th
- and I have had no reponse to date! Maybe in the States you will have better
- luck!
-
- Merry Christmas
-
- Paul Simmonds
- VINES System Manager
-
- +-----------------------+-----------------------------------------------------+
- | Paul Simmonds | Voice : +235 528822 ext 4609 (+235 464609 direct) |
- | CODAS Division | FAX : +235 464404 |
- | JET Joint Undertaking | E-mail : ps@jet.uk (UK & World) |
- | Abingdon | X.400 : G=Paul;S=Simmonds;OU=CODAS;ON=JET;PD=JET; |
- | Oxfordshire | (C=GB;AD=GOLD 400; Number:234284400235) |
- | OX14 3EA |-----------------------------------------------------|
- | United Kingdom | JET is Europe's (EC Funded) Fusion Research Project |
- +-----------------------+-----------------------------------------------------+
- | Disclaimer: Any views expressed are mine, and do not reflect those of JET |
- +-----------------------------------------------------------------------------+
-