[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#725009: installer: Debian Installer gives wrong advice on choosing secure passwords



Control: reassign -1 debian-installer

On Lu, 30 sep 13, 14:52:17, Jacek Wielemborek wrote:
> Package: installer
> Severity: normal
> 
> Dear Maintainer,
> 
> I noticed that the "choose password" dialog that can be seen when 
> asked for a LUKS password in Debian Installer gives wrong 
> advice on how a secure password looks like. It says that a good 
> password contains both uppercase and lowercase characters and 
> punctuation, which might mislead users that are unaware that 
> 16-character password that is an impossible-to-remember mixture
> of characters is actually less secure than 20-characters-long 
> password made of 4 English words, because the latter won't be
> so easily forgotten (and isn't that much easier to crack). Please
> change the text to educate the users properly on how to select
> passphrases (passphrases, not passwords).
> 
> 
> -- System Information:
> Debian Release: 7.1
>   APT prefers stable-updates
>   APT policy: (500, 'stable-updates'), (500, 'stable')
> Architecture: i386 (i686)
> 
> Kernel: Linux 3.2.0-4-686-pae (SMP w/1 CPU core)
> Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash

-- 
http://wiki.debian.org/FAQsFromDebianUser
Offtopic discussions among Debian users and developers:
http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic
http://nuvreauspam.ro/gpg-transition.txt

Attachment: signature.asc
Description: Digital signature


Reply to: