Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #268395

Re: Root password strength

From Dan Ritter <dsr@randomstring.org>
Newsgroups linux.debian.user
Subject Re: Root password strength
Date 2024-03-19 16:10 +0100
Message-ID <IjJ6x-beZ-13@gated-at.bofh.it> (permalink)
References <IjIWR-b9R-15@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

Jan Krapivin wrote: 
> I read Debian Administrator's handbook now. And there are such words:
> 
> The root user's password should be long (12 characters or more) and
> impossible to guess. 
...

 
> The thing is my password is very easy now, and i haven't thought about
> *"automated
> connection attempts"*, that sounds rather... scary? My password is easy
> because i am not afraid of direct physical access to the computer.
> 
> But... if there is a serious network danger, then i should change my
> password of course. But how strong it should be? If we speak about network
> attacks... it should be like 32 symbols with special symbols? Or this
> paragraph in a handbook is rather paranoid?
> 
> I have activated sudo now for my regular user. Can it (password of regular
> user) be less sophisticated than root password? Because it would be rather
> difficult to enter 32 symbols every time i wake my PC after suspend.

The threats are different for:

- a laptop that travels and can be stolen
- a desktop that does not leave your residence
- a server that accepts connections from the outside world

If you have a laptop, you want to have your filesystem encrypted
(LUKS or ZFS encryption, most likely) and protected by a 12+
character password.

If you have a desktop, perhaps you feel it is at low risk. 

If you have a machine that runs the ssh daemon, you should not
use passwords at all for remote logins; you should use ssh keys.

Check whether you are running ssh:

/sbin/service ssh status

If it is active, use sudo to edit /etc/ssh/sshd_config to lock
down access. (It may be that you don't want it running at all,
too.)

-dsr-

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Root password strength Jan Krapivin <daydreamer199005@gmail.com> - 2024-03-19 15:50 +0100
  Re: Root password strength Jan Krapivin <daydreamer199005@gmail.com> - 2024-03-19 16:00 +0100
  Re: Root password strength Dan Ritter <dsr@randomstring.org> - 2024-03-19 16:10 +0100
    Re: Root password strength debian-user@howorth.org.uk - 2024-03-19 16:50 +0100
      Re: Root password strength Greg Wooledge <greg@wooledge.org> - 2024-03-19 21:20 +0100
  Re: Root password strength Greg Wooledge <greg@wooledge.org> - 2024-03-19 16:10 +0100
    Re: Root password strength jeremy ardley <jeremy.ardley@gmail.com> - 2024-03-19 21:30 +0100
      Re: Root password strength <tomas@tuxteam.de> - 2024-03-20 06:40 +0100
        Re: Root password strength Jeffrey Walton <noloader@gmail.com> - 2024-03-20 07:10 +0100
          Re: Root password strength tomas@tuxteam.de - 2024-03-20 08:40 +0100
        Re: Root password strength jeremy ardley <jeremy.ardley@gmail.com> - 2024-03-20 08:50 +0100
          Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-20 12:10 +0100
            Re: Root password strength <tomas@tuxteam.de> - 2024-03-20 12:20 +0100
              Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-20 13:20 +0100
            Re: Root password strength jeremy ardley <jeremy.ardley@gmail.com> - 2024-03-20 12:30 +0100
              Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-20 13:10 +0100
              Re: Root password strength Dan Ritter <dsr@randomstring.org> - 2024-03-20 13:40 +0100
            Re: Root password strength Jeffrey Walton <noloader@gmail.com> - 2024-03-20 14:30 +0100
              Re: Root password strength <tomas@tuxteam.de> - 2024-03-20 14:50 +0100
  Re: Root password strength Marco Moock <mm@dorfdsl.de> - 2024-03-19 16:40 +0100
  Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-19 20:40 +0100
    Re: Root password strength debian-user@howorth.org.uk - 2024-03-19 22:00 +0100
  Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 16:00 +0100
    Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-20 16:20 +0100
      Re: Root password strength Jan Krapivin <daydreamer199005@gmail.com> - 2024-03-20 16:30 +0100
        Re: Root password strength John Hasler <john@sugarbit.com> - 2024-03-20 17:10 +0100
          Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 17:20 +0100
            Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 18:50 +0100
              Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-20 19:10 +0100
                Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 19:30 +0100
              Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 19:50 +0100
              Re: Root password strength Lee <ler762@gmail.com> - 2024-03-20 20:50 +0100
                Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 21:00 +0100
                Re: Root password strength Lee <ler762@gmail.com> - 2024-03-20 21:30 +0100
          Re: Root password strength <tomas@tuxteam.de> - 2024-03-20 18:50 +0100
            Re: Root password strength John Hasler <john@sugarbit.com> - 2024-03-20 19:50 +0100
        Re: Root password strength "Alexander V. Makartsev" <avbetev@gmail.com> - 2024-03-21 20:40 +0100
          Re: Root password strength Jan Krapivin <daydreamer199005@gmail.com> - 2024-03-22 11:00 +0100
            Re: Root password strength Joe <joe@jretrading.com> - 2024-03-22 12:00 +0100
            Re: Root password strength "Alexander V. Makartsev" <avbetev@gmail.com> - 2024-03-22 13:30 +0100
              Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-23 10:50 +0100
            Re: Root password strength Lee <ler762@gmail.com> - 2024-03-23 01:10 +0100
              Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-23 11:30 +0100
      Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 16:50 +0100
    Re: Root password strength John Hasler <john@sugarbit.com> - 2024-03-20 17:00 +0100
      Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 17:10 +0100
        Re: Root password strength Jeffrey Walton <noloader@gmail.com> - 2024-03-20 17:30 +0100
          Re: Root password strength Max Nikulin <manikulin@gmail.com> - 2024-03-20 17:50 +0100
          Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 18:00 +0100
            Re: Root password strength Jeffrey Walton <noloader@gmail.com> - 2024-03-20 18:40 +0100
              Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 18:50 +0100
                Re: Root password strength Jeffrey Walton <noloader@gmail.com> - 2024-03-20 19:20 +0100
                Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 19:40 +0100
                Re: Root password strength Jeffrey Walton <noloader@gmail.com> - 2024-03-20 21:20 +0100
                Re: Root password strength Curt <curty@free.fr> - 2024-03-21 17:50 +0100
                Re: Root password strength John Hasler <john@sugarbit.com> - 2024-03-20 19:40 +0100
                Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 19:50 +0100
        Re: Root password strength John Hasler <john@sugarbit.com> - 2024-03-20 17:30 +0100
          Re: Root password strength Pierre-Elliott Bécue <peb@debian.org> - 2024-03-20 18:00 +0100
        Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-20 19:20 +0100
      Re: Root password strength Michael Kjörling <2695bd53d63c@ewoof.net> - 2024-03-20 17:10 +0100

csiph-web