3 ms·
Back 20-ish years ago when NIS+ was used to federate ssh logins on multiple *NIX clusters at some CS department that shall remain nameless: getent passwd |
by 1letterunixname 3y ago
Back 20-ish years ago when NIS+ was used to federate ssh logins on multiple *NIX clusters at some CS department that shall remain nameless:
getent passwd | awk | johntheripper
Say "hello" to trivial plaintext passwords of 6 tenured profs, a dozen associate profs, and 30+ students in a few minutes and without rainbow tables. (There was no ill-intent involved and the unfortunate parties were notified indirectly.) The flaw was giving everyone access to unsalted crypt password hashes. Exploring systems today would likely result in an instant Aaron Swartz-style crucifixion because of the cult of "zero tolerance" equals zero justice and zero proportionality because curiosity must be immediately murdered by the "culture of 'no'".