Orakel wrote:
unixmuseum wrote:
You are?
Not arrogant.
Oh yes you are! One of the worst kinds actually! Look how strongly you react to the simplest disagreement...
BTW, the question wasn't "what are you?". To mark surprise after an affirmation, it is usually common practice to repeat the affirmation in an interrogative manner...
I think you covered your use of the word arrogant pretty well... For next week, your homework assignment is to insult people with a word starting with the letter B...
Orakel wrote:
Advertise to whom? Break in to what? I stated the security consequences. He/she (assuming male gender for the rest of the post) is able to think for himself wether the solution is worth it or not.
You just did... This was a joke... Such an angry kid... You stated nothing and braged that you had no need for a root password and everything open because NAT was protecting you.
Orakel wrote:
Not really possible here given my browser doesn't run as root nor runs on IRIX. You're welcome to try it though. What website would you wish me to travel to (please no flash/shockwave/activex/java, it won't work)?
You crack me up! You can't possibly be that naive! Oh sorry, my arrogant side coming out again... BTW, do you even have an arrogant sgi running that arrogant IRIX OS? Just arrogant curiousity...
Orakel wrote:
He stated he has FTP enabled. It could be (according to you "most likely not") that FTP using the root account is possible. Wether it is passworded doesn't matter in that case since he knows his password. Shadowed passwd file is also completely irrelevant. IF it he is able to get Telnet working via this way he's also able to enable SSH and change his password although he'll have to reboot to get Telnet working which might be unpleasant, you're right on that. So why not state the possible solution to the problem?
Try to understand what I'm saying... Read the post over and over before spewing. Maybe in your world it's OK to have open root password and such (although I'm wondering what world that would be); in a business it is never the case. Disabling root ftp is part of the standard procedure to secure a UNIX workstation, just like shadow password file is.
As hamei is running in a business environment, it is very likely that the admin or himself has spent more time making sure his workstations are secured than decorating them with LEDs...
As for solutions to the problem, I believe I talked about rlogin, which would be a possible solution... Wasn't as earth shattering as "try to overwrite a file by ftp", but that's all my arrogant self could come up with...
So, let me propose another one: "why not sacrificing a black goat over the machine, it should fix it". If anybody disagrees with me, I'll call them arrogant. Sounds familiar?
Orakel wrote:
Really? He firmly agrees, that's why he's using Telnet and FTP, not SSH! Why haven't i read any of your preachings on hamei's usage of Telnet/FTP? Finally i also hope you're not using too much fw_* packages, for the sake of your brilliant (network) security paranoia....
All hail to Mr Orakel, IT Security Technical Giant. Read again what you wrote: "no root password, I don't care about IRIX security"...
There is no brilliance in my somewhat secured network, I never claimed anything like that... Just common sense, a dose of reality and great information from many arrogant people who happen to know a lot more than I do. You should try it, it's quite nice to learn something (step #1 for Mr Orakel: quit thinking you're so smart ands so original).
An arrogant link for your reading pleasure:
http://www.blacksheepnetworks.com/security/resources/IRIX_65.html