[Info-vax] SSH on VAX - performance impact of break in attempts

Michael Moroney moroney at world.std.spaamtrap.com
Wed Aug 25 14:49:50 EDT 2010


glen herrmannsfeldt <gah at ugcs.caltech.edu> writes:

>VAXman- wrote:
>(snip)

>> The 12 character username prohibits the 'administrator' account.

>I thought that was changed a long time ago.

>I used to have a VMS account in a place that always made accounts
>named after someone's last name.  (I suppose unless it was already
>taken.)  That was about 1985.  I ended up with only the first
>12 characters of my last name, but conveniently it allowed me
>to log in typing all 14.  Then, around 1988, VMS changed.

>I believe I was asked if I wanted all 14, but I was too used to
>the other one by then.

Doesn't VMS simply ignore all characters after the first 12?  I think
my audit server logs show many breakin attempts against the nonexistent
ADMINISTRATO account.

(speaking of which, has anyone ever set up a captive ADMINISTRATO or
ROOT account with an easily-guessable password that simply logs what
the remote hacker tries to do (or even generate dummy output) just for
giggles?)



More information about the Info-vax mailing list