3 ms·
> Once you enable root access - by 'testing' this - others can remotely & silently access the system as root. That's not accurate. The user appears to be ther
by djrogers 9y ago
> Once you enable root access - by 'testing' this - others can remotely & silently access the system as root.
That's not accurate. The user appears to be there either way, but attempting to log in to a machine remotely using 'root' and no password does not work - even after doing the preference pane thing...
- Jedd 9y agoI don't have access to a vulnerable machine -- just going by comments in the other HN thread. root account is 'there' all the time, yes. This process enables the account proper (rather than just sudo). Evidently some remote mechanisms using root work after the account is enabled.
- geoelectric 9y agoWonder if people tried screen share/vnc with that theory. I'd suspect anything gui-driven.