I found many administrators trying to hide out their presence on a server by disabling commands like who, finger, w, etc and files like utmp, wtmp, lastlog, but they always forget those beautiful terminals they’re connected to that give away their activity every time they type a command.
Nimeona wengi watendaji kujaribu kuficha nje uwepo wao kwenye server na kulala amri kama ambao, kidole, katika, nk na files kama utmp, wtmp, lastlog, lakini wao daima kusahau vituo wale nzuri wao ni kushikamana na kwamba kutoa mbali shughuli zao kila wakati wao aina ya amri.