However, even in these systems, if the desktop where these systems are installed are compromised or the network sniffed, the authentication system may also compromised. Sometimes access is controlled not by the identity of the person but by the network address of the requesting computer. This type of access control is notoriously weak and often taken advantage of by assuming a spoofed network address. Using a network topology and physical access controls that limit unauthorized connections. Safeguarding our passwords is important to retaining control over our data, accounts, and computers.
CERT also maintains an independent list of current activity .