Re: [gentoo-user] Eez a byootiful dai todai

["Hemmann, Volker Armin" <volker.armin.hemmann@tu-clausthal.de>]

On Freitag, 30. März 2007, Boyd Stephen Smith Jr. wrote:
> On Friday 30 March 2007, "Hemmann, Volker Armin"
> <volker.armin.hemmann@tu-clausthal.de> wrote about 'Re: [gentoo-user] Eez
>
> a byootiful dai todai':
> > On Freitag, 30. März 2007, Dan Farrell wrote:
> > > The neat computers in the world today deserver Linux, and let's face
> > > it, we all deserve to be gurus on 90% of computers and not 5%.
> >
> > 5% is totally ok for me, if 90% marketshare means ubuntu
> > I mean no real root (ubuntu),
>
> This is silly, Ubuntu has just as much of a root as any other linux, it
> just randomizes/expires the password instead of prompting you for one by
> default.  A simple 'sudo passwd' will fix let you login or su to root.  Of
> course, you might as well just use 'sudo -s'.
>
> Personally, I use Kubuntu on my laptop and have never had a reason to
> change root's password from the default.  Even on my Gentoo desktop, I use
> sudo (and my user password) 100x more often than su/login and the root
> password.
>
> The choice to not ask for root's password during installation was amde for
> good reason.  One less question makes the installation easier and faster,
> and providing the randomized password + sudo access increases or at least
> does not decrease security afforded by the "old" Debian way (which ends up
> prompting for two passwords; each twice).

one question makes soooo much of a difference. And instead of two passwords, 
one never entered in X, an attacker only needs to capture your user password, 
which is typed in douzends of time, to f* up your machine....

--
gentoo-user@gentoo.org mailing list