/* Andrew Bond [abond@netapp.com] writes: */

I'm not clear how a hacker could destroy data in snapshots - remember that they are read-only, and that's why they have proved useful in cases of virus attack.

I can't say what Bruce was thinking, but a cracker could do the obvious:

snap delete <vol-name> name

once they gain access to the filer either directly or via the admin host. That pretty much destroys data in a snapshot. :-)