Re: Some issues with the way the install goes

houghi <houghi@xxxxxxxxxxxxxxxxxx> wrote:
Paul J Gans wrote:
I agree. It is the Ubuntu method. It isn't totally windows-like.
You still have to do a "sudo" to become root, even if it is the
same password.

I disagree. With Ununtu there is no login for root by default. Here the
password is just the same. Someting the majority of people where doing
anyway.

Correct. But the effect is the same. In both cases you
simply do a sudo.


However, since Ubuntu became popular, everybody knows this technique.
So if your security is compromised as a user and somebody gains your
password, it is the first thing they'll try to get root.

If your security is compromised as a user, your machine is compromised
anyway,

No. This is not true. The user is compromized, but the machine
isn't.


A bad choice. I don't know what they were thinking.

They were thinking: the majority of people use the same password anyway,
so why would we let them enter it twice? People who are not willing to
do that can still change it.

Sure. Most people use trivial passwords. Why not set one for
them so that they don't have to bother. Linksys might be a
good one.

--
--- Paul J. Gans
.

Relevant Pages

  • Re: Some issues with the way the install goes
    ... houghi wrote: ... Someting the majority of people where doing ... they can also get the password of root. ...
    (alt.os.linux.suse)
  • Re: mount -o loop as user
    ... >> houghi zmarszczył się, zamyślił i w wiadomości z poniedziałek, 22 ... > With sudo, you need to enter the password. ... The process that does this semms to be owned by root. ...
    (alt.os.linux.suse)
  • Re: Card Reader
    ... Running your script ... instead of sudo is worthless because your script *can't do ... And of course it doesn't ask for a root password, ... >> That's just more bullshit Bryan, and you might as well leave ...
    (rec.photo.digital)
  • Re: hi all..
    ... And with sudo, I certainly wouldn't because they already have root. ... If you somehow had access to my account right now, ... install an effective key logger without root. ...
    (Fedora)
  • Re: hi all..
    ... compromise security to achieve it - such as very insecure sudo defaults ... that essentially make any admin group user password a root password. ... IE someone gets your user account password, they can do more than just ...
    (Fedora)