> Following is > an example of my ppp.chatscript. > [ ... ] > word \qabcdefg\q
This is very bad ! With the \q at the end, the password is shown in files /var/log/ppp.log and /var/log/messages, which are readable by everyone by default. You should only specify \qabcdefg so that the password is replaced by a string of question marks in log files. I checked inside ppp_2.2.0f-19.deb, available on the stable tree, and the ppp.chatscript that comes with it shows two \q like above. It is declared as bug 7967 since March 19th, 1997, but it still is not corrected. Meanwhile, the Debian Web pages state that most security bugs get fixed in 48 hours... -- Michel Beland [EMAIL PROTECTED] professionnel de recherche tel: (514)369-5223 fax: (514)369-3880 CERCA (CEntre de Recherche en Calcul Applique) 5160, boul. Decarie, bureau 400(423), Montreal (Quebec), Canada, H3X 2H9