3 ms·

Does that mean that `wc -l /etc/passwd` is just two?

• daurnimator 8y ago
  No. There will be plenty of system user. But they do not have SSH access permitted.
  • tjoff 8y ago
    It doesn't matter if ssh access is permitted.
    • mirimir 8y ago
      So how is an attacker going to access the machine?
      • tjoff 8y ago
        If a certain account is present then the attacker might know a certain service is running and then target that. Might also reveal the purpose of the machine (oh, this is probably the build server) or who is managing it.
        • mirimir 8y ago
          Nothing crucial should be directly accessible from the Internet.
          • tjoff 8y ago
            Indirectly then, or, the publicly facing servers are crucial enough. It is information leakage, not the end of the world but it can potentially be helpful for an attacker.