Re: nidump on OS X

["Martin" <ma () placid tv>]

I cannot reproduce this on my 10.2 system.   It does give you the crypted
password ofcurrent user but not the root user.  However this does not prevent you
from using'sudo' so in way way you still get root.

/M

> Basically any normal user can get a dump of the passwd file and attempt
>  brute force attacks on the encrypted passwds, it includes the root
> passwd.