[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-devel
Subject:    Re: IBM Applies for Password Manager Patent
From:       "Aaron J. Seigo" <aseigo () kde ! org>
Date:       2003-11-11 16:53:33
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tuesday 11 November 2003 06:42, George Staikos wrote:
> It 
 also defeats the "walk away from the terminal and the wallet is still
> accessible" safeties.  I think it's very convenient, but a bad idea from a
> security perspective.

you can also set your root password to be empty, or allow all users unlimited 
access to commands via sudo... those are not the default settings on most 
OSes, and certainly not what you'd want in a secure environment. however you 
_can_ set it up that way if it makes sense for your installation. i don't see 
how making this an option (off by default) would be a bad thing.

- -- 
Aaron J. Seigo
GPG Fingerprint: 8B8B 2209 0C6F 7C47 B1EA  EE75 D6B7 2EB1 A7F1 DB43
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2-rc1-SuSE (GNU/Linux)

iD8DBQE/sRQN1rcusafx20MRArUSAKCObk6Uw5c1UooQaOLQf1IAMG1DpQCgiEag
wlpBokVzlTJER8essSAIKFc=
=rZvd
-----END PGP SIGNATURE-----
 
>> Visit http://mail.kde.org/mailman/listinfo/kde-devel#unsub to unsubscribe <<
[prev in list] [next in list] [prev in thread] [next in thread]