Firewall Wizards mailing list archives

Re: Lotus Domino as an access control to internal network


From: Rik Farrow <rik () spirit com>
Date: Fri, 6 Mar 1998 10:53:06 -0700 (MST)

Aleph One <aleph1 () dfw net> may have written:
Your statement does not make sense. Who are you planning to guess the
password using a dictionary attack unless you also have the user's USER.ID
files? And if you have the USER.ID file and do guess the password you have
already broken in.

I am talking about using Notes as an agent for guessing a 
users password, and suggesting that this password will also be used
anywhere the user has access within an organization:  terminal
servers, not connected to the Domino server, other servers
such as Netware or NT servers.  Notes makes a dandy and  practically
undetectable mechanism for password guessing, and the password
guessed very likely will be in use elsewhere.

Regards,
Rik



Current thread: