dscl . -list /Users Unusually Long All Legitimate Or Hacked? [duplicate]

terminal security accounts user-account

Solution 1:

All users account starting with an _ are automatically generated by the system. For example, _lp is an account used to manage the Printing Services without the use of the priviledged account root. This is a separation of priviledges and a good protection.

For all other account names, daemon and nobody are also generated by the system.

For the remaining accounts, let's say you see a suspect user account bond, use the following command:

finger bond

to check what bond account is used for and when it was last used to connect on your system.

Related

Let $A,B \subset \mathbb{R}$. Show that $\sup(A \cup B) = \max\{\sup A, \sup B\}$
The limit of reciprocal is the reciprocal of the limit
Why this definition of integrability by sup and inf integrals is necessary?
$\limsup $ and $\liminf$ of a sequence of subsets relative to a topology
Writing projection in terms of projection matrix
Parametric Form for a General Parabola
For $a,b$ coprime, there exists positive integers $x,y$ such that $ax-by=1$
Simplify result of $\int_0^{\infty} \frac{1}{1+x^n}dx$
Find $\lim_{x\to 1}\frac{p}{1-x^p}-\frac{q}{1-x^q}$ [duplicate]
Proof of Drinker paradox [duplicate]
Variant of Gödel sentence
Calculating volume enclosed using triple integral