On Thu, February 5, 2015 9:06 am, James B. Byrne wrote: > > On Wed, February 4, 2015 16:55, Warren Young wrote: >>> On Feb 4, 2015, at 12:16 PM, Lamar Owen <lowen at pari.edu> wrote: >>> >>> Again, the real bruteforce danger is when your /etc/shadow is >>> exfiltrated by a security vulnerability >> >> Unless you have misconfigured your system, anyone who can copy >> /etc/shadow already has root privileges. They do not need to crack >> your passwords now. You are already boned. >> >> >> > > My thought exactly. > After all this discussion about "is this enough for good security or should we add something else" the last not requiring tremendously larger effort, I'm left with the following feeling. I'm a "relict" left from long time ago when security was considered paramount, when if something can be done it had to be done, no matter that the same is allegedly covered by something else already in place. We always considered the word "paranoia" is in sysadmin's job description (I still do, yet I didn't check IT job descriptions lately, - maybe I should take a look; there seem to be many "Windows" brew people up on the top of IT ladder these days). I feel like there is brave new world of admins who feel it right to have "iPad-like" everything, i.e. boxes cooked up and sealed by vendor, and you have no way even to look inside, not to say re-shape interior to your understanding [of security or anything else]. Am I the only one? Not that this my comment meant as contradiction to any particular post (this post I'm replying to included). It is just the existence (and length) of this discussion (whether one should, or shouldn't, or anything) makes me think that what I was trained about security is not accepted by many these days. Or maybe I simply got tired following it instead of spending more time doing my own sysadmin's job ?? Good luck, everyone. Stay safe and keep your boxes secure! Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++