Re: [Full-disclosure] distributing passwords to users

2011-12-07 Thread Martijn Broos
[Full-disclosure] distributing passwords to users O.o and you act like what he wants is a good thing? Getting /any/ service account with that file would be better than pillaging an entire server of ssh keys. With ssh keys you know you only got access to a few more servers on the network, maybe not even

Re: [Full-disclosure] distributing passwords to users

2011-12-07 Thread Gage Bystrom
one to impersonate as another user? > > ** ** > > Kind regards, > > ** ** > > Martijn > > ** ** > > ** ** > > *From:* full-disclosure-boun...@lists.grok.org.uk [mailto: > full-disclosure-boun...@lists.grok.org.uk] *On Behalf Of *Gage Bystrom > *Sent

Re: [Full-disclosure] distributing passwords to users

2011-12-07 Thread Gage Bystrom
O.o and you act like what he wants is a good thing? Getting /any/ service account with that file would be better than pillaging an entire server of ssh keys. With ssh keys you know you only got access to a few more servers on the network, maybe not even root or admin unless you got lucky and score

Re: [Full-disclosure] distributing passwords to users

2011-12-06 Thread Gage Bystrom
I'm disturbed in the first place that you want to distribute password lists to multiple users. I'm disturbed more so that there is no apparent cognitive dissonance preventing you from functioning enough to have sent that email. Someone please tell me that I'm not the only one disturbed here? And i