full-disclosure - Re: Ubuntu 11.10 now unsecure by default

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 18 Nov 2011 08:04:14 -0500
From: Valdis.Kletnieks@...edu
To: Mario Vilas <mvilas@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Ubuntu 11.10 now unsecure by default

On Fri, 18 Nov 2011 12:24:36 +0100, Mario Vilas said:
> Let's not overreact. We're talking about a guest account only on dekstop
> systems, for local login only, and perfectly visible to the user. The only
> problem I see here is not having a simple GUI way to disable the guest
> login for a non tech-savvy user, but no more. (Or am I missing something
> here?)

Given that Ubuntu is an African word for "Can't configure Debian", and the
target audience of Ubuntu, the lack of the simple GUI is surprising...

(Yes, there's still one config setting saving your butt in sshd_config - but
for a distro that wraps a Teletubby interface around freaking /bin/su so you
don't accidentally hurt yourself, the fact that there's exactly one config file
setting saving your butt if you manage to enable inbound ssh seems a bit of an
oversight).

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/