RE: [cobalt-users] Admin/root password security hole

[Jonas Pasche <jonas@xxxxxxxx>]

hi there,

> well,... its not a "real" security hole...
> because linux mostly ONLY counts the first 8 entered letters/digits

funny addition... as already pointed out the raq uses only the first 8 
characters of a password [if you don't use PAM]. but the GUI always says 
something about a password length "between 3 and 16 characters", so i asked 
cobalt why the tell us something about 16 characters while only 8 are 
recognized. jason from cobalt told me:

"Basically, the reasoning behind the 16 characters is
to encourage people to pick secure passwords.  We do realize that Linux
truncates beyond 8 characters, but it's probably better for users to have
truncated passwords than to have passwords that are too short."

just my $0.02 :-)

cya, jonas.


____________________________________________
Jonas Pasche
Technischer Support

webagentur Domke GmbH

Rheinstr. 3 - 64283 Darmstadt - Germany

Telefon +49 6151 17742-33
Telefax +49 6151 293173

http://www.domke.de

mailto:j.pasche@xxxxxxxx
____________________________________________