Re: Write-only devices (Was read only devices)

[aleipold () clark net (aleipold () clark net)]

> I think you should log more than just valid usernames.  In logging code
> I wrote once I logged all usernames that had one of the following
> characteristics:
>         - existing user
>         - only alpha numeric characters, starting with an alpha
>
> While that may still log passwords, it only logs weak passwords.


        Take it a step further. In messing around with sources to deamons
I figured the best way to do this would be: (note, don't do this on system
with lots of accounts). I knew that a computer (586) can do about 1200
crypts per second. So then I:

while (accountsleft)
oops=crypt(words,salt[a-z]);
if oops=rightpassword then don't syslogit
otherwise:
syslog("oops...");