Re: Wireless Network Key
- From: "Mark Haney" <mhaney@xxxxxxxxxxxxxxxx>
- Date: Wed, 06 Aug 2008 11:10:05 -0400
Leo Cacciari wrote:
This is excessively bad advice, and you even tell why it is bad. This is
done already by the gnome network manager. If n-m is installed and it
does not work, then it is another problem, but normally in ubuntu
wireless network works like that out of the box.
By the way, your is bad advice even if the OP has not n-m installed and
does not wish to install it, as then standard scripts like if-up
*already* have a much more secure (well, less insecure at least) way to
do that by writing the key in the
/etc/network/interfaces file
Enjoy
<soapbox>
I totally disagree. You really think having the key in
/etc/network/interfaces is any safer? Or having it in NM is safer?
You're out of your mind. Anyone who gets root access can dig it up and
steal it from anywhere those files are stored.
I never said anything other than a shell script CAN be used. I also
warn that it's a security risk and to lock it down tight. Do you really
think I don't know that? I deal with network security on a daily
basis. I have 100K users on our network that I have to keep safe.
The point is (and MY point is) this method is possible, but NOT
encouraged. He doesn't want to have to enter the key every time.
Entering the key every time IS the preferred and secure method of doing
this.
It's sort of like not wanting to key in a password everytime and setting
autologin. That's just as insecure (from a network security standpoint)
and scripting the wireless key.
I don't see the advice is /bad/, so much as it isn't recommend and it
does include the disclaimer that it's not recommended. It's up to the
OP to determine if that is an acceptable risk. It is not for me to
decide that and withold my information because I think it's a bad idea.
Now, had I simply said 'sure throw it in a shell script' and NOT warned
the OP of the security risk, then you have every right to point that
out. However, I believe in offering all alternatives ALONG with any
potential hazards therein.
So, flame all you want. I stand by my post in that it gives the OP him
an alternative and a caveat to that so he can make up his own mind.
He's not a child (AFAIK) and can use that if he wishes. It's not up to
YOU to determine what's bad advice.
</soapbox>
--
Libenter homines id quod volunt credunt -- Caius Julius Caesar
Mark Haney
Sr. Systems Administrator
ERC Broadband
(828) 350-2415
Call (866) ERC-7110 for after hours support
--
ubuntu-users mailing list
ubuntu-users@xxxxxxxxxxxxxxxx
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
- Follow-Ups:
- Re: Wireless Network Key
- From: Derek Broughton
- Re: Wireless Network Key
- From: Leo Cacciari
- Re: Wireless Network Key
- References:
- Wireless Network Key
- From: Greg Lindstrom
- Re: Wireless Network Key
- From: Mark Haney
- Re: Wireless Network Key
- From: Leo Cacciari
- Wireless Network Key
- Prev by Date: Re: Bug report out of context: Harcy handling of /dev/sd? devices is unacceptable
- Next by Date: Re: The Ubuntu Experiment
- Previous by thread: Re: Wireless Network Key
- Next by thread: Re: Wireless Network Key
- Index(es):
Relevant Pages
|