Re: Write-only devices (Was read only devices)

[jlemon () americantv com (Jonathan Lemon)]

> On Thu, 27 Jun 1996, J.R.Valverde (jr) wrote:
>
> >         FTP: failed login attempt for user "pAsSwOrD"
> >         FTP: successful login for user "user" two seconds later
>
> I always wondered why the heck this happens. While knowing what account is
> being attempted is valuable, why the heck doesn't the code just try and
> see if pAsSwOrD is a valid account name?  If it isn't, don't display it
> or say "failed login attempt for an undefined system user."

Compare these two (hypothetical) log entries:

    FTP: failed login attempt for user "manager"
    FTP: failed login attempt for user "guest"
    FTP: failed login attempt for user "system"

    FTP: failed login attempt for user "jelmon"
    FTP: failed login attempt for user "fpt"

It's obvious that something quite different is going on here - one is just
a bunch of typos, while the other is an idiotic breakin attempt.  Just
saying "failed login" for both cases doesn't help much.
--
Jonathan