Skip to main content
spaces, spelling
Source Link
schroeder
  • 132.1k
  • 55
  • 307
  • 348

Is revealing a PC account user name bad?

In short NO. Why?
 

  1. Well for starters your PC username is not a information that is unique unique to you. A lot of people in the world can have the same windows usernameWindows username.
  2. Since itsit's not unique to a person like an email address where two people cant have the same email address an attacker cantcan't gain much information or even tell with a certain degree that the username belongs to you and you alone.
  3. sureSure, if that username of yours is your name itself the attacker might use that knowledge to further OSINT you but that's just about it.

Googling typically gets me back to the first two of these articles. These answers show that on a website it may be bad to reveal the username for the website account, because it gives malicious users needed information to try to crack an account. The "hacking" is rendered easier because the bad guy already knows where on the internet to try the passwords to crack the website account.

That is because a username in a website is unique and furthermore in a brute force attack two pieces of information are needed. An attacker could  (if the website allows) try a combination of passwordpasswords since he already knows that the username is valid.

Even if the user has port-forwarded remote-in software, one would have to know the internet address of the computer or the router, of which there's some 4 billion in the IPv4 space, and astronomically more in IPv6. Knowing where to start poking seems a lot harder.

The assumption that you make here is wrong.Never Never think that by hiding IP address you might be "secure". The concept of defense in depthdefence-in-depth has to be applied here. The internet is being scanned for vulnerabilities as you read this answer.

The logs therefore reveal the account user name to anyone who may download the log file. And everyone including non-authenticated visitors, can download log files. Some users obfuscate these path names because they feel that having their user names out on the web is bad.

In my opinion, there is nothing insecure here, plus you already say half of the people use fake the names. There is nothing substantial to gain here for an attacker except maybe a bit of information about the person.

Is revealing a PC account user name bad?

In short NO. Why?
 

  1. Well for starters your PC username is not a information that is unique to you. A lot of people in the world can have the same windows username.
  2. Since its not unique to a person like an email address where two people cant have the same email address an attacker cant gain much information or even tell with a certain degree that the username belongs to you and you alone.
  3. sure if that username of yours is your name itself the attacker might use that knowledge to further OSINT you but that's just about it.

Googling typically gets me back to the first two of these articles. These answers show that on a website it may be bad to reveal the username for the website account, because it gives malicious users needed information to try to crack an account. The "hacking" is rendered easier because the bad guy already knows where on the internet to try the passwords to crack the website account.

That is because a username in a website is unique and furthermore in a brute force attack two pieces of information are needed. An attacker could(if the website allows) try a combination of password since he already knows that the username is valid.

Even if the user has port-forwarded remote-in software, one would have to know the internet address of the computer or the router, of which there's some 4 billion in the IPv4 space, and astronomically more in IPv6. Knowing where to start poking seems a lot harder.

The assumption that you make here is wrong.Never think that by hiding IP address you might be "secure". The concept of defense in depth has to be applied here. The internet is being scanned for vulnerabilities as you read this answer.

The logs therefore reveal the account user name to anyone who may download the log file. And everyone including non-authenticated visitors, can download log files. Some users obfuscate these path names because they feel that having their user names out on the web is bad.

In my opinion there is nothing insecure here, plus you already say half of the people fake the names. There is nothing substantial to gain here for an attacker except maybe a bit of information about the person.

Is revealing a PC account user name bad?

In short NO. Why?

  1. Well for starters your PC username is not information that is unique to you. A lot of people in the world can have the same Windows username.
  2. Since it's not unique to a person like an email address where two people cant have the same email address an attacker can't gain much information or even tell with a certain degree that the username belongs to you and you alone.
  3. Sure, if that username of yours is your name itself the attacker might use that knowledge to further OSINT you but that's just about it.

Googling typically gets me back to the first two of these articles. These answers show that on a website it may be bad to reveal the username for the website account, because it gives malicious users needed information to try to crack an account. The "hacking" is rendered easier because the bad guy already knows where on the internet to try the passwords to crack the website account.

That is because a username in a website is unique and furthermore in a brute force attack two pieces of information are needed. An attacker could  (if the website allows) try a combination of passwords since he already knows that the username is valid.

Even if the user has port-forwarded remote-in software, one would have to know the internet address of the computer or the router, of which there's some 4 billion in the IPv4 space, and astronomically more in IPv6. Knowing where to start poking seems a lot harder.

The assumption that you make here is wrong. Never think that by hiding IP address you might be "secure". The concept of defence-in-depth has to be applied here. The internet is being scanned for vulnerabilities as you read this answer.

The logs therefore reveal the account user name to anyone who may download the log file. And everyone including non-authenticated visitors, can download log files. Some users obfuscate these path names because they feel that having their user names out on the web is bad.

In my opinion, there is nothing insecure here, plus you already say half of the people use fake names. There is nothing substantial to gain here for an attacker except maybe a bit of information about the person.

Is revealing a PC account user name bad?

In short NO.Why Why?

  1. Well for starters your PC username is not a information that is unique to you.A A lot of people in the world can have the same windows username.
  2. Since its not unique to a person like an email address where two people cant have the same email address an attacker cant gain much information or even tell with a certain degree that the username belongs to you and you alone.
  3. sure if that username of yours is your name itself the attacker might use that knowledge to further OSINT you but that's just about it.

Googling typically gets me back to the first two of these articles. These answers show that on a website it may be bad to reveal the username for the website account, because it gives malicious users needed information to try to crack an account. The "hacking" is rendered easier because the bad guy already knows where on the internet to try the passwords to crack the website account.

That is because a username in a website is unique and furthermore in a brute force attack two pieces of information are needed.An An attacker could(if the website allows) try a combination of password since he already knows that the username is valid.

Even if the user has port-forwarded remote-in software, one would have to know the internet address of the computer or the router, of which there's some 4 billion in the IPv4 space, and astronomically more in IPv6. Knowing where to start poking seems a lot harder.

The assumption that you make here is wrong.Never think that by hiding IP address you might be "secure". The concept of defencedefense in depth has to be applied here.The The internet is being scanned for vulnerabilities as you read this answer.

The logs therefore reveal the account user name to anyone who may download the log file. And everyone including non-authenticated visitors, can download log files. Some users obfuscate these path names because they feel that having their user names out on the web is bad.

In my opinion there is nothing insecure here,Plus plus you already say half of the people fake the names.There There is nothing substantial to gain here for an attacker except maybe a bit of information about the person but THAT'S ALL!.

Is revealing a PC account user name bad?

In short NO.Why?

  1. Well for starters your PC username is not a information that is unique to you.A lot of people in the world can have the same windows username.
  2. Since its not unique to a person like an email address where two people cant have the same email address an attacker cant gain much information or even tell with a certain degree that the username belongs to you and you alone.
  3. sure if that username of yours is your name itself the attacker might use that knowledge to further OSINT you but that's just about it

Googling typically gets me back to the first two of these articles. These answers show that on a website it may be bad to reveal the username for the website account, because it gives malicious users needed information to try to crack an account. The "hacking" is rendered easier because the bad guy already knows where on the internet to try the passwords to crack the website account.

That is because a username in a website is unique and furthermore in a brute force attack two pieces of information are needed.An attacker could(if the website allows) try a combination of password since he already knows that the username is valid.

Even if the user has port-forwarded remote-in software, one would have to know the internet address of the computer or the router, of which there's some 4 billion in the IPv4 space, and astronomically more in IPv6. Knowing where to start poking seems a lot harder.

The assumption that you make here is wrong.Never think that by hiding IP address you might be "secure". The concept of defence in depth has to be applied here.The internet is being scanned for vulnerabilities as you read this answer

The logs therefore reveal the account user name to anyone who may download the log file. And everyone including non-authenticated visitors, can download log files. Some users obfuscate these path names because they feel that having their user names out on the web is bad.

In my opinion there is nothing insecure here,Plus you already say half of the people fake the names.There is nothing substantial to gain here for an attacker except maybe a bit of information about the person but THAT'S ALL!

Is revealing a PC account user name bad?

In short NO. Why?

  1. Well for starters your PC username is not a information that is unique to you. A lot of people in the world can have the same windows username.
  2. Since its not unique to a person like an email address where two people cant have the same email address an attacker cant gain much information or even tell with a certain degree that the username belongs to you and you alone.
  3. sure if that username of yours is your name itself the attacker might use that knowledge to further OSINT you but that's just about it.

Googling typically gets me back to the first two of these articles. These answers show that on a website it may be bad to reveal the username for the website account, because it gives malicious users needed information to try to crack an account. The "hacking" is rendered easier because the bad guy already knows where on the internet to try the passwords to crack the website account.

That is because a username in a website is unique and furthermore in a brute force attack two pieces of information are needed. An attacker could(if the website allows) try a combination of password since he already knows that the username is valid.

Even if the user has port-forwarded remote-in software, one would have to know the internet address of the computer or the router, of which there's some 4 billion in the IPv4 space, and astronomically more in IPv6. Knowing where to start poking seems a lot harder.

The assumption that you make here is wrong.Never think that by hiding IP address you might be "secure". The concept of defense in depth has to be applied here. The internet is being scanned for vulnerabilities as you read this answer.

The logs therefore reveal the account user name to anyone who may download the log file. And everyone including non-authenticated visitors, can download log files. Some users obfuscate these path names because they feel that having their user names out on the web is bad.

In my opinion there is nothing insecure here, plus you already say half of the people fake the names. There is nothing substantial to gain here for an attacker except maybe a bit of information about the person.

Source Link
yeah_well
  • 3.8k
  • 1
  • 16
  • 32

Is revealing a PC account user name bad?

In short NO.Why?

  1. Well for starters your PC username is not a information that is unique to you.A lot of people in the world can have the same windows username.
  2. Since its not unique to a person like an email address where two people cant have the same email address an attacker cant gain much information or even tell with a certain degree that the username belongs to you and you alone.
  3. sure if that username of yours is your name itself the attacker might use that knowledge to further OSINT you but that's just about it

Googling typically gets me back to the first two of these articles. These answers show that on a website it may be bad to reveal the username for the website account, because it gives malicious users needed information to try to crack an account. The "hacking" is rendered easier because the bad guy already knows where on the internet to try the passwords to crack the website account.

That is because a username in a website is unique and furthermore in a brute force attack two pieces of information are needed.An attacker could(if the website allows) try a combination of password since he already knows that the username is valid.

Even if the user has port-forwarded remote-in software, one would have to know the internet address of the computer or the router, of which there's some 4 billion in the IPv4 space, and astronomically more in IPv6. Knowing where to start poking seems a lot harder.

The assumption that you make here is wrong.Never think that by hiding IP address you might be "secure". The concept of defence in depth has to be applied here.The internet is being scanned for vulnerabilities as you read this answer

The logs therefore reveal the account user name to anyone who may download the log file. And everyone including non-authenticated visitors, can download log files. Some users obfuscate these path names because they feel that having their user names out on the web is bad.

In my opinion there is nothing insecure here,Plus you already say half of the people fake the names.There is nothing substantial to gain here for an attacker except maybe a bit of information about the person but THAT'S ALL!