Re: [SLUG] A Sys Admin's worst nightmare

2006-04-22 Thread Simon Wong
On Fri, 2006-04-21 at 18:01 +1000, Matthew Hannigan wrote: > When are you going to set the root password? Are you sure > no-one is going to put a key-logger on the keyboard cable? > A camera over your shoulder? Trojan /bin/login to mail/store > the cleartext? Initially it was setup prior to anyo

Re: [SLUG] A Sys Admin's worst nightmare

2006-04-21 Thread Matthew Hannigan
On Fri, Apr 21, 2006 at 05:18:34PM +1000, Simon Wong wrote: > On Fri, 2006-04-21 at 17:11 +1000, Matthew Hannigan wrote: > > As I don't think anyone is actually able to decrypt > > to get root's password, the only way is social engineering. > > I am 99.9% sure but I'm still very cautious. > > > A

Re: [SLUG] A Sys Admin's worst nightmare

2006-04-21 Thread Simon Wong
On Fri, 2006-04-21 at 17:11 +1000, Matthew Hannigan wrote: > As I don't think anyone is actually able to decrypt > to get root's password, the only way is social engineering. I am 99.9% sure but I'm still very cautious. > And when the prize of a $1000 is worth many months average wages > in some

Re: [SLUG] A Sys Admin's worst nightmare

2006-04-21 Thread Matthew Hannigan
On Fri, Apr 21, 2006 at 04:49:06PM +1000, Simon Wong wrote: > Don't worry Glen, there's absolutely no way that I want ANYONE to be > able to do this. > > That's probably the scariest thing personally, it's a public humiliation > for myself if someone does it relatively *easily*. > > That's why i

Re: [SLUG] A Sys Admin's worst nightmare

2006-04-20 Thread Simon Wong
On Fri, 2006-04-21 at 15:49 +0930, Glen Turner wrote: > > It's funny how I have this feeling of wanting it to be "fair" for some > > strange reason yet that is so obviously not want I want either! > > Perhaps not the best thing to admit on a public mailing list :-) Don't worry Glen, there's absol

Re: [SLUG] A Sys Admin's worst nightmare

2006-04-20 Thread Simon Wong
On Fri, 2006-04-21 at 15:38 +0930, Glen Turner wrote: > Of course, once you've got root access you can change the root password :-) Good point. I guess the Rules are that you have to provide the original password. It's funny how I have this feeling of wanting it to be "fair" for some strange rea

Re: [SLUG] A Sys Admin's worst nightmare

2006-04-20 Thread Glen Turner
Simon Bowden wrote: Getting the root password itself is quite separate from getting root access (unless you've not cleaned up after that ubuntu bug which leaves it cleartext). Unless someone is regularly keying in the root password and they're capturing that somehow, then they'll need to break

Re: [SLUG] A Sys Admin's worst nightmare

2006-04-20 Thread Simon Wong
On Fri, 2006-04-21 at 13:31 +1000, Simon Bowden wrote: > Getting the root password itself is quite separate from getting root > access (unless you've not cleaned up after that ubuntu bug which leaves it I know. I guess it should be an "impossible" task since he doesn't want to give away the mon

Re: [SLUG] A Sys Admin's worst nightmare

2006-04-20 Thread Simon Bowden
On Fri, 21 Apr 2006, Simon Wong wrote: * They have to open a file only readable by root and report back the contents plus the root password plus the method of attack Getting the root password itself is quite separate from getting root access (unless you've not cleaned up after tha

Re: [SLUG] A Sys Admin's worst nightmare

2006-04-20 Thread Dean Hamstead
isn't this more slug-chat? anyway, i would like to see this, as well as ubuntu vs openbsd Dean Simon Wong wrote: I have setup an Internet Cafe for a mate of mine in a far away land. In what seems like a nightmare I haven't woken up from yet, he is proposing a crazy marketing stunt to pull in

[SLUG] A Sys Admin's worst nightmare

2006-04-20 Thread Simon Wong
I have setup an Internet Cafe for a mate of mine in a far away land. In what seems like a nightmare I haven't woken up from yet, he is proposing a crazy marketing stunt to pull in people to the Cafe. A $1000 reward for obtaining the root password off one of the PC terminals! I don't even want to