login banners

From: Patrick Kingi (Patrick.Kingi@nz.logical.com)
Date: 02/18/03

  • Next message: Roman Medina: "Brute forcing a M$ SQL Server password through SQL Injection" 
    From: Patrick Kingi <Patrick.Kingi@nz.logical.com>
To: pen-test@securityfocus.com
Date: Tue, 18 Feb 2003 13:55:04 +1300

    Greetings all,

    It has been standard practice to ensure systems ensure their login banners
    warn the users that unauthorised access is not allowed, your activity may be
    logged etc...

    A client has asked if there is any evidence that this really matters. I
    heard a story once upon a time that a hacker did not get prosecuted because
    the login banner said something like "Welcome to your friendly neighborhood
    computer". Is this an urban legend?

    Does anyone have any evidence that the login banner has been used in court?

    Any help would be appreciated.

    regards,
    Patrick

    ----------------------------------------------------------------------------

    Do you know the base address of the Global Offset Table (GOT) on a Solaris 8
    box?
    CORE IMPACT does.
    www.securityfocus.com/core