[makmanalp]

Whoever it is, they are a genius of deception. Check this out: http://pastebin.com/tSiQevxe

Kayla first asks for root password using two passwords that she already has but might not necessarily be the root one. She also already knows that remote root isn't allowed. This way:

1) She'd get the root password e-mailed to her if it wasn't one of those two. "No, it's not those, it's '<password>'."

2) She sets up her point of entry.

Great stuff.