RE: ftp and passwords
> quite true. what i was really suggesting is make them use passwords
> 20 times more obfuscated then you would normally enforce on a ssh/scp
I remember my newbie days in college, when our local UNIX admin has such a
draconian password filter installed it took me 30 minutes to successfully
change my password. Ah, memories.
> user. and make them change it once a week. eventually the
> inconvenience might entice them to switch to ssh. (otoh they would
> probably be more likely to find one of those `save my password in
> cleartext, as insecurely as possible' checkboxes littered about
> windows. but thats where the weekly change comes in ;-) maybe may it
> a daily change.. </bofh>
Ah, I see what you were getting at now....security through cruelty. You
can't take any scheisse from these users. If they won't use ssh, make life
so difficult that they'll be begging to make the switch. #include
evil-laugh.c
Jason Mogavero
Sr. Network Engineer
Inflow, Inc
(303)942-2828
> -----Original Message-----
> From: Ethan Benson [mailto:erbenson@alaska.net]
> Sent: Wednesday, January 24, 2001 3:38 PM
> To: debian-user@lists.debian.org
> Subject: Re: ftp and passwords
>
>
> On Wed, Jan 24, 2001 at 10:55:54AM -0700, Jason Mogavero wrote:
> >
> > Not to pick a nit, but secure passwords aren't even a
> speedbump if you're
> > being sniffed. (though they ARE good practice)
>
>
> --
> Ethan Benson
> http://www.alaska.net/~erbenson/
>
Reply to: