Zoff wrote:
> as far as i remember , the switch was NOT announced to this list. (it was 
> just discussed in irc channel)
> also there is/was no mention on the wiki of that change.

See the mail from me to this list 8 hours prior to your mail. The switch
is a consequence of a community voting that we had a few months ago. You
might not like it (I certaintly was happy with dropbear), but the
majority voted for this.

And sorry for not announcing all changes beforehand on the mailing list.
We know we should have. But Zoff, don't be an ass about this. Fact is
there are less than a handfull of people working on this, and none of
them is paid for it. What do you expect? A SHR
Customer-relations-department? This is -despite what you might think-
not an evil scheme by an inner cabal to throw out all non-elite people.
Google "ssh iphone exploit" and you'll see why empty (or standard)
passwords are evil.

> and having and empty password for a development device is not bad, dont 
> predent this thing is selling in the stores.
The default openssh config is to disable empty passwords and that
happens to suit us well. The Freerunner has telnetd installed by
default. It is a simple matter of enabling that if you prefer to keep a
passwordless account.
Also if you use key authentication you won't have to type passwords.

ssh listens by default on Wlan, and I don't want to have anyone being
able to send SMS and read out my address book at the main train station.

> also if you dont have WLAN and bloetooth on, nobody can enter even with empty 
> password.
Yes, but WLAN is on sometimes.

> and wlan is mostly broken anyway.

Works fine here. mokonnect was broken while the E transition, I think.
Let us know if it doesn't work, in the latest version. And file bugs
against the mokonnect author...

spaetz

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Shr-devel mailing list
[email protected]
http://lists.shr-project.org/mailman/listinfo/shr-devel

Reply via email to