Some of the security problems I found in Korea Univ.
seem to be serious in several aspects..
The most noticible one is that many people
still don't reconize the danger of remotely
login with telnet or rlogin.
Someone on the ethernet(LAN) can see your password
or passwords in plaintext because LAN doesn't provide
the protection of any kind of the traffic right
at the moment.
So, please don't log into a remote host if you don't
have a way to prevent others log into the site you want
to protect.
And all of things, you don't log into other machine
with "root".
Someone can pick up the "root" password and as you
surely know that someone will loginto your machine.
for the moment remidies for this problem in the
academic world are limited, because it's hard
to restrict the protocols and services
used in the academic LAN.
I will tell you later how to go around the problem
with some public domain softwares.
For now, don't even think about loggin with "root" remotely
Thanks.
Corncerned graduate of Korea Univ.