Re: Lotus Domino as an access control to internal network

Aleph One <aleph1_at_dfw.net> may have written:
>Your statement does not make sense. Who are you planning to guess the
>password using a dictionary attack unless you also have the user's USER.ID
>files? And if you have the USER.ID file and do guess the password you have
>already broken in.

I am talking about using Notes as an agent for guessing a
users password, and suggesting that this password will also be used
anywhere the user has access within an organization: terminal
servers, not connected to the Domino server, other servers
such as Netware or NT servers. Notes makes a dandy and practically
undetectable mechanism for password guessing, and the password
guessed very likely will be in use elsewhere.

Regards,
Rik
Received on Mar 06 1998