Oops, looks like I pasted some code I was working on in by mistake! I meant to quote your bit about if I grep the password file will anyone get mad. A: no, no and no-one will even notice/know. Who's a weenie now :P LOL then ROTFL.
Anyway if you do cat /etc/passwd >passwords; more passwords you will be able to scroll through all the usernames/UID/GUID at you leisure. If you encipher the UID with Blowfish you can relax until I read your secret key so this wodget should be owned by root. Most hacks (like most robberies) don't try to break down the armour plated door. They sneak in through the open back door/window/sewer....
If you knew more about what you fear you would be far more nervous about the versions of Bind, SSH, Apache, FTP, etc, etc that run on your server. No one is really going to try to brute force passwords given a list of usernames (without the crypt hashes) when all they need to do is hack a daemon to get root. Even if I get a user account I still need to get root. Paranoia is fine. Focussed paranoia is more effective.....
cheers
tachyon
In reply to Re^8: Can the username be represented differently ?
by tachyon
in thread Can the username be represented differently ?
by peterr
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |