[alt.security] Shadow password files

Makey@Logicon.COM (Jeff Makey) (06/08/90)

In <9006070151.AA03928@world.std.com> bzs@world.std.com (Barry Shein) writes:
>The objection to shadow password files is that it's an admission that
>hiding the file contents is critical to the entire system's security

"Critical" is the wrong word, here.  The use of shadow password files
is nothing more than an application of the well-established concept of
"in-depth" security measures, where the security of the system does
not depend completely upon any single security feature.

>Don't argue that it merely "improves" the
>existant security, fine, you obviously decide for yourself so you can
>believe whatever you like. Multiplicative probabilities aren't
>compelling arguments.

Probability theory is just so much bunk, huh?  You can disbelieve
whatever you like, I guess.

                           :: Jeff Makey

Department of Tautological Pleonasms and Superfluous Redundancies Department
    Disclaimer: All opinions are strictly those of the author.
    Internet: Makey@Logicon.COM    UUCP: {nosc,ucsd}!logicon.com!Makey