News for hackers. Stuff that matters.

A comment on How I spend my first 5 minutes on a server. Parent comment

Re:How I spend my first 5 minutes on a server by mbreese on Monday March 04, 2013 @12:23AM (#5316802)
But they still would know the 'deploy' password needed for sudo access. And while you could be relatively sure that they couldn't get access, you still couldn't be completely sure since they did have sudo access to begin with. So, the best thing would be to change the shared password. That could be avoided with non-shared accounts.
[ Parent | on HN ]
Re:How I spend my first 5 minutes on a server by luser001 on Monday March 04, 2013 @12:45AM (#5316870)
Are you insinuating that the user could have used sudo access to install a backdoor of some sort? If so, changing the password won't stop them either. Am I missing something?
[ Parent | on HN ]