Re: Empty root password

2006-05-08 Thread Wijnand Wiersma
On 5/8/06, Lars Hansson [EMAIL PROTECTED] wrote: On Sunday 07 May 2006 18:41, Jonathan Glaschke wrote: If administrators are so dump to use an emtpy password on internet servers, it wouldn't be usefull to force a password. That's not necessarily dumb. If your location is physically secure and

Re: Empty root password

2006-05-08 Thread Peter Fraser
My surprise was not because of a perceived lack of security, but rather that the passwd command will not let you set any password to be the empty password. (Yes, I know there are other methods to force it)

Re: Empty root password

2006-05-07 Thread Jonathan Glaschke
On Sat, May 06, 2006 at 05:30:21PM -0700, Eric Furman wrote: --- Peter Fraser [EMAIL PROTECTED] wrote: I was very surprised, that when I was installing a 3.9 system, that you can use an empty root password I accidentally entered a 'return' when it asked for the root password, so I

Re: Empty root password

2006-05-07 Thread [EMAIL PROTECTED]@mgEDV.net
Think of somebody who burgles your house to steal your privat data. When *rofl* -- burgles your house to steal your privat data? come on, before this happens your dead and your home-cinema is gone! i'd bet, nobody is really interested in private data. the only thing i can imagine is

Re: Empty root password

2006-05-07 Thread [EMAIL PROTECTED]@mgEDV.net
I accidentally entered a 'return' when it asked for the root password, so I entered a 'return again when I was asked to repeat the password, thinking that a empty password would be denied, and I would be asked again. man, if you want to enter an empty password, do it! unix is a system that

Re: Empty root password

2006-05-07 Thread Antonios Anastasiadis
in fact, using an empty root password is a perfectly correct and smart security practice.Don't tell that to anyone, as the openbsd guys are trying to keep this technique for themselves. A second step to secure your system is to post your machine's ip here. Nodoby here believes in security through

Re: Empty root password

2006-05-07 Thread Lars Hansson
On Sunday 07 May 2006 18:41, Jonathan Glaschke wrote: If administrators are so dump to use an emtpy password on internet servers, it wouldn't be usefull to force a password. That's not necessarily dumb. If your location is physically secure and you dont allow remote root logins there is no

Empty root password

2006-05-06 Thread Peter Fraser
I was very surprised, that when I was installing a 3.9 system, that you can use an empty root password I accidentally entered a 'return' when it asked for the root password, so I entered a 'return again when I was asked to repeat the password, thinking that a empty password would be denied, and I

Re: Empty root password

2006-05-06 Thread Tony Abernethy
Peter Fraser wrote: I was very surprised, that when I was installing a 3.9 system, that you can use an empty root password I accidentally entered a 'return' when it asked for the root password, so I entered a 'return again when I was asked to repeat the password, thinking that a empty

Re: Empty root password

2006-05-06 Thread Jonathan Glaschke
On Sat, May 06, 2006 at 03:14:56PM -0400, Peter Fraser wrote: I was very surprised, that when I was installing a 3.9 system, that you can use an empty root password I accidentally entered a 'return' when it asked for the root password, so I entered a 'return again when I was asked to repeat

Re: Empty root password

2006-05-06 Thread Christian Pedaschus
lesson today: if you don't want the first entered pwd, enter something different on the second pass, and it WILL ask you again ;) Peter Fraser wrote: I was very surprised, that when I was installing a 3.9 system, that you can use an empty root password I accidentally entered a 'return' when

Re: Empty root password

2006-05-06 Thread Damian Gerow
Thus spake Jonathan Glaschke ([EMAIL PROTECTED]) [06/05/06 16:58]: : Think of somebody who burgles your house to steal your privat data. When : your computer asks him to enter the password he sure will try the well : known standard passwords like god, secret and sex. Or maybe : swordfish. But

Re: Empty root password

2006-05-06 Thread Eric Furman
--- Peter Fraser [EMAIL PROTECTED] wrote: I was very surprised, that when I was installing a 3.9 system, that you can use an empty root password I accidentally entered a 'return' when it asked for the root password, so I entered a 'return again when I was asked to repeat the password

Re: Empty root password

2006-05-06 Thread Roger Neth Jr
On 5/6/06, Eric Furman [EMAIL PROTECTED] wrote: --- Peter Fraser [EMAIL PROTECTED] wrote: I was very surprised, that when I was installing a 3.9 system, that you can use an empty root password I accidentally entered a 'return' when it asked for the root password, so I entered a 'return