60-second timeout in Unix login

[Dragos Ruiu]

In article <18083 at topaz.rutgers.edu>, ron at topaz.rutgers.edu (Ron Natalie) writes:
> Actually at BRL, it remembers all past passwords that everyone used and
> won't ever let you reuse them (or use the "passwd" program to set too
> accounts to the same password).
> 
> -Ron

 Assuming 'two' for 'too'.
 Isn't this rather a large security hole if someone stumbles across another
 password. He will then know that there is an account with that password,
 and a breach would be short work.
 
 Comments ?


-- 
Dragos Ruiu           UUCP:<backbone>!alberta!edson!tic!dragos!work
     Hey, remember the one who pretended to be a super-villain to get beaten ?
     Whatever happened to him ?
     He pulled it on Rorshach and Rorshach dropped him down an elevator shaft.