good passwords

[Charlie Miller]

In article <4451 at fluke.COM> strong at tc.fluke.COM (Norm Strong) writes:
>And if you can't bribe the superuser, here's another way to gain access to
>some poor fool's files.  
>
>After you're sure he's logged in, have the receptionist call him and tell him
>that he's supposed to attend a meeting in Room xxx right away.  When he leaves
>his desk, run over to his terminal and copy all his files into your
>directory.
>-- 
>Norm   (strong at tc.fluke.com)

How about leaving a program running on a terminal, say in a student
terminal room, that mimics the standard login prompt?  Then just file
away the user name and password...etc.

Charlie (cmiller at sunspot.UUCP)