Skip to main content
added 628 characters in body
Source Link

Why is it necessary to store operating system passwords hashed? From what I've learned, passwords are stored on the hard drive/SSD in /etc/shadow. However, if a malicious agent was able to get access to this file, doesn't that mean they can potentially access all the user's other files? If so, what is the point of cracking the password if you already have access to everything?

To clarify, my initial thinking is that its a catch-22, you need the password to use the computer and view the password file but if you are viewing that file, you must already have broken in, and thus no longer need the password.

I understand that some people use their passwords in different places so having that information can be useful for a hacker, but I am more concerned with the purpose of having the password for the computer that was broken into. (And I am more thinking of in terms of personal computers, so its not guaranteed that the obtained password was used for other important things like bank accounts)

Why is it necessary to store operating system passwords hashed? From what I've learned, passwords are stored on the hard drive/SSD in /etc/shadow. However, if a malicious agent was able to get access to this file, doesn't that mean they can potentially access all the user's other files? If so, what is the point of cracking the password if you already have access to everything?

Why is it necessary to store operating system passwords hashed? From what I've learned, passwords are stored on the hard drive/SSD in /etc/shadow. However, if a malicious agent was able to get access to this file, doesn't that mean they can potentially access all the user's other files? If so, what is the point of cracking the password if you already have access to everything?

To clarify, my initial thinking is that its a catch-22, you need the password to use the computer and view the password file but if you are viewing that file, you must already have broken in, and thus no longer need the password.

I understand that some people use their passwords in different places so having that information can be useful for a hacker, but I am more concerned with the purpose of having the password for the computer that was broken into. (And I am more thinking of in terms of personal computers, so its not guaranteed that the obtained password was used for other important things like bank accounts)

deleted 103 characters in body
Source Link
schroeder
  • 132.2k
  • 55
  • 307
  • 348

I am quite new to linux and cybersecurity, so I would appreciate any help you can give.

My question is whyWhy is it necessary to store operating system passwords hashed? From what I've learned, passwords are stored on the hard drive/SSD in /etc/shadow. However, if a malicious agent was able to get access to this file, doesn't that mean they can potentially access all the user's other files? If so, what is the point of cracking the password if you already have access to everything? Just curious!

I am quite new to linux and cybersecurity, so I would appreciate any help you can give.

My question is why is it necessary to store passwords hashed? From what I've learned, passwords are stored on the hard drive/SSD in /etc/shadow. However, if a malicious agent was able to get access to this file, doesn't that mean they can potentially access all the user's other files? If so, what is the point of cracking the password if you already have access to everything? Just curious!

Why is it necessary to store operating system passwords hashed? From what I've learned, passwords are stored on the hard drive/SSD in /etc/shadow. However, if a malicious agent was able to get access to this file, doesn't that mean they can potentially access all the user's other files? If so, what is the point of cracking the password if you already have access to everything?

Source Link

What is the point of storing hashed passwords? If that file is read, doesn't that mean the computer has already been compromised?

I am quite new to linux and cybersecurity, so I would appreciate any help you can give.

My question is why is it necessary to store passwords hashed? From what I've learned, passwords are stored on the hard drive/SSD in /etc/shadow. However, if a malicious agent was able to get access to this file, doesn't that mean they can potentially access all the user's other files? If so, what is the point of cracking the password if you already have access to everything? Just curious!