Re: Empty root password

2006-05-08 Thread Peter Fraser
My surprise was not because of a perceived lack of security, but rather that the "passwd" command will not let you set any password to be the empty password. (Yes, I know there are other methods to force it)

Re: Empty root password

2006-05-08 Thread Wijnand Wiersma
On 5/8/06, Lars Hansson <[EMAIL PROTECTED]> wrote: On Sunday 07 May 2006 18:41, Jonathan Glaschke wrote: > If administrators are so dump to use an emtpy password on internet > servers, it wouldn't be usefull to force a password. That's not necessarily dumb. If your location is physically secure

Re: Empty root password

2006-05-07 Thread Lars Hansson
On Sunday 07 May 2006 18:41, Jonathan Glaschke wrote: > If administrators are so dump to use an emtpy password on internet > servers, it wouldn't be usefull to force a password. That's not necessarily dumb. If your location is physically secure and you dont allow remote root logins there is no p

Re: Empty root password

2006-05-07 Thread Antonios Anastasiadis
in fact, using an empty root password is a perfectly correct and smart security practice.Don't tell that to anyone, as the openbsd guys are trying to keep this technique for themselves. A second step to secure your system is to post your machine's ip here. Nodoby here believes in securi

Re: Empty root password

2006-05-07 Thread [EMAIL PROTECTED]@mgEDV.net
> I accidentally entered a 'return' when it asked for the > root password, so I entered a 'return" again when > I was asked to repeat the password, thinking that > a empty password would be denied, and I would be asked > again. > man, if you want to enter an empty password, do it! unix is a syste

Re: Empty root password

2006-05-07 Thread [EMAIL PROTECTED]@mgEDV.net
> Think of somebody who burgles your house to steal your privat > data. When *rofl* --> burgles your house to steal your privat data? come on, before this happens your dead and your home-cinema is gone! i'd bet, nobody is really interested in private data. the only thing i can imagine is someth

Re: Empty root password

2006-05-07 Thread Jonathan Glaschke
On Sat, May 06, 2006 at 05:30:21PM -0700, Eric Furman wrote: > --- Peter Fraser <[EMAIL PROTECTED]> wrote: > > I was very surprised, that when I was installing > > a 3.9 system, that you can use an empty root > > password > > > > I accidentally entered a 

Re: Empty root password

2006-05-06 Thread Roger Neth Jr
On 5/6/06, Eric Furman <[EMAIL PROTECTED]> wrote: --- Peter Fraser <[EMAIL PROTECTED]> wrote: > I was very surprised, that when I was installing > a 3.9 system, that you can use an empty root > password > > I accidentally entered a 'return' when it asked for

Re: Empty root password

2006-05-06 Thread Eric Furman
--- Peter Fraser <[EMAIL PROTECTED]> wrote: > I was very surprised, that when I was installing > a 3.9 system, that you can use an empty root > password > > I accidentally entered a 'return' when it asked for > the > root password, so I entered a 'retu

Re: Empty root password

2006-05-06 Thread Damian Gerow
Thus spake Jonathan Glaschke ([EMAIL PROTECTED]) [06/05/06 16:58]: : Think of somebody who burgles your house to steal your privat data. When : your computer asks him to enter the password he sure will try the well : known standard passwords like "god", "secret" and "sex". Or maybe : "swordfish".

Re: Empty root password

2006-05-06 Thread Christian Pedaschus
lesson today: if you don't want the first entered pwd, enter something different on the second pass, and it WILL ask you again ;) Peter Fraser wrote: >I was very surprised, that when I was installing >a 3.9 system, that you can use an empty root password > >I accidentally

Re: Empty root password

2006-05-06 Thread Jonathan Glaschke
On Sat, May 06, 2006 at 03:14:56PM -0400, Peter Fraser wrote: > I was very surprised, that when I was installing > a 3.9 system, that you can use an empty root password > > I accidentally entered a 'return' when it asked for the > root password, so I entered a 'retur

Re: Empty root password

2006-05-06 Thread Tony Abernethy
Peter Fraser wrote: > > I was very surprised, that when I was installing > a 3.9 system, that you can use an empty root password > > I accidentally entered a 'return' when it asked for the > root password, so I entered a 'return" again when > I was asked

Empty root password

2006-05-06 Thread Peter Fraser
I was very surprised, that when I was installing a 3.9 system, that you can use an empty root password I accidentally entered a 'return' when it asked for the root password, so I entered a 'return" again when I was asked to repeat the password, thinking that a empty password