Re: Musings about Usernames in adduser and Debian
On Sat, Nov 23, 2024 at 12:53:52PM +0100, Gioele Barabucci wrote:
> On 23/11/24 09:32, Johannes Schauer Marin Rodrigues wrote:
> > But my 2 cents on the topic are: Lets please allow more than ascii in
> > usernames.
>
> Yes please, but opt-in and behind a big red warning that says that it is not
> interoperable (outside POSIX),
adduser requires an option to allow such user names. I think that some
peoples might find it offensive to require an option to be allowed their
native names. You're arguing to not relax the requirement for plain
adduser <username>, right?
> potentially insecure (homographs) and at
> high-risk of breaking existing applications (lack of standardized
> normalization form).
Can you outline an attack/failure scenario?
Greetings
Marc
--
-----------------------------------------------------------------------------
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany | lose things." Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature | How to make an American Quilt | Fax: *49 6224 1600421
Reply to: