On Sun, Oct 07, 2007 at 02:26:51PM +0200, Lubomir Kundrak wrote: > Knowing that an user exists or not is in principle about the same > dangerous as knowing whether a machine is up or not. Or should we > declare ping to be a security threat? This isn't true. Many attack vectors require knowing an exist account name. -- Matthew Miller mattdm@xxxxxxxxxx <http://mattdm.org/> Boston University Linux ------> <http://linux.bu.edu/> -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list
