[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#364526: debian-installer: Please implement a password-checking module



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

All:

I do realize the importance of good/strong password and the desire of
guiding installers to used them. I also realize the need for ease of use
especially for new users.

If I'm new to Debian installer I don't care about good/strong passwords
as I know I will probably muck it up or want to redo the install several
times. So setting the root password to "root" is very convenient and not
a security risk.

Many new users to Debian complain how difficult and geeky it is to use.
Some of them even go back to MS. Opensource should be about not only
choice but also simplicity.

If I want to run a kiosk that only displays pictures of the building its
in using a stand alone machine locked in a box, I don't care about
security. It would really piss me off if I was force to use a long
complex password as this would be a waste of my time.

Let the user/installer chose whether he/she wants to use "root" as the
root password or some 256 char long password with whatever set of
characters without bugging them. The guide is there and guess what...
the user/installer can read! If they chose to ignore the guidelines then
that is there choice.



- --
Thank you.
*********************************************************************
                     Steven Demetriuson't
- ---------------------------------------------------------------------
                   Tel: (855 12) 810 350
            E-mail: steven.demetrius@fiwwi.com
*********************************************************************
                  Steven Demetrius 2007
*********************************************************************
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHJB2NE5pZTZCwxmQRAqYXAJ9vU6bz+eTYPBaNDxqX9mWmQAf+KQCfXMPQ
x5etIi4FJO8yHJOvROGVGNY=
=0cSU
-----END PGP SIGNATURE-----




Reply to: