Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #202399

Re: Password policy.

From Corey Manshack <corey@manshack.me>
Newsgroups linux.debian.user
Subject Re: Password policy.
Date 2018-11-14 13:20 +0100
Message-ID <wU2jf-5mx-5@gated-at.bofh.it> (permalink)
References (3 earlier) <wU0AO-4d3-5@gated-at.bofh.it> <wU0Ku-4gz-15@gated-at.bofh.it> <wU1wR-4Oi-5@gated-at.bofh.it> <wU1wR-4Oi-3@gated-at.bofh.it> <wU1wS-4Oi-13@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


It may be that the Debian team is more in tune with their users. I’ve caught hell trying to convince old timers that their password of mark1 was incredibly horrible. People even tried to get me fired over my “strict” password policy.

Sent from my iPhone

> On Nov 14, 2018, at 7:28 PM, Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> wrote:
> 
> 
> 
>> On 14/11/18 10:25 pm, Corey Manshack wrote:
>> So using the file uploader tool we can inject many more dangerous scripts and codes to gain higher access than just “reading” /etc/shadow if the uploader tool is running as privileged user or we gained privilege escalation another way.
> 
> Sure, I never said it was a good example...
> 
> In any case, weak passwords as per the "recommendation" are surprising
> to say the least.
> 
> A.
> 

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Password policy. peter@easthope.ca - 2018-11-13 18:10 +0100
  Re: Password policy. Reco <recoverym4n@enotuniq.net> - 2018-11-13 18:30 +0100
  Re: Password policy. Gene Heskett <gheskett@shentel.net> - 2018-11-13 18:50 +0100
    Re: Password policy. Reco <recoverym4n@enotuniq.net> - 2018-11-13 20:10 +0100
      Re: Password policy. Gene Heskett <gheskett@shentel.net> - 2018-11-13 22:50 +0100
        Re: Password policy. Reco <recoverym4n@enotuniq.net> - 2018-11-14 05:40 +0100
    Re: Password policy. peter@easthope.ca - 2018-11-13 21:00 +0100
      Re: Password policy. Dan Ritter <dsr@randomstring.org> - 2018-11-13 21:10 +0100
      Re (2): Password policy. peter@easthope.ca - 2018-11-13 22:20 +0100
        Re: Re (2): Password policy. Reco <recoverym4n@enotuniq.net> - 2018-11-14 05:40 +0100
  Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-13 19:20 +0100
  Re: Password policy. Jude DaShiell <jdashiel@panix.com> - 2018-11-13 19:40 +0100
    Re: Password policy. Reco <recoverym4n@enotuniq.net> - 2018-11-13 20:10 +0100
      Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-13 21:20 +0100
        Re: Password policy. peter@easthope.ca - 2018-11-14 03:40 +0100
  Re: Password policy. peter@easthope.ca - 2018-11-14 04:10 +0100
    Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-14 10:50 +0100
      Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 11:30 +0100
        Re: Password policy. Corey Manshack <corey@manshack.me> - 2018-11-14 11:40 +0100
          Re: Password policy. Corey Manshack <corey@manshack.me> - 2018-11-14 12:30 +0100
            Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 12:30 +0100
              Re: Password policy. Corey Manshack <corey@manshack.me> - 2018-11-14 13:20 +0100
                Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 15:30 +0100
                Re: Password policy. Brad Rogers <brad@fineby.me.uk> - 2018-11-14 16:50 +0100
          Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 12:30 +0100
        Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-14 12:20 +0100
          Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 15:40 +0100
            Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-14 17:00 +0100
              Re: Password policy. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2018-11-14 17:50 +0100
                Re: Password policy. Brian <ad44@cityscape.co.uk> - 2018-11-14 21:30 +0100
              Re: Password policy. Richard Hector <richard@walnut.gen.nz> - 2018-11-15 01:10 +0100

csiph-web