On Sun, 26 Jan 2003, gabriel wrote:

> > Hi Pilip.  root can set a user's passwd to anything you want, but......
> >
> > DON'T DO IT !!
> >
> > Passwords this short are just a waste of the user's time at login.  If you
> > are going to have them that short you might as well not have any at all.
> >
> > Cracking 1 letter passwords is so easy it can be done by hand from the
> > keyboard.  Using any one of the many crack tools available would make
> > it practically instantaneous.
> 
> 
> as an additional question to this
> how insecure is a machine with *NO* login software?  (ie. there's just a promt 
> with 'hit enter to activate this console).  the machine is properly 
> firewalled and doesn't allow ANY connections to it from the outside world...  
> what other areas do i have to lock down in this case?

Access to the console.
-- 
Mike Burger
http://www.bubbanfriends.org

Visit the Dog Pound II BBS
telnet://dogpound2.citadel.org or http://dogpound2.citadel.org:2000



-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to