Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 19 Jan 2002 21:21:53 +0300
From:      "Andrey A. Chernov" <ache@nagual.pp.ru>
To:        Dag-Erling Smorgrav <des@ofug.org>
Cc:        mark@grondar.za, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: For all who miss it, PAM changes explanation reposted
Message-ID:  <20020119182153.GM11604@nagual.pp.ru>
In-Reply-To: <xzppu466xm4.fsf@flood.ping.uio.no>
References:  <200201190901.g0J91H641020@freefall.freebsd.org> <xzp1ygm9vc8.fsf@flood.ping.uio.no> <20020119170316.GA11315@nagual.pp.ru> <xzpit9y8dcg.fsf@flood.ping.uio.no> <20020119172829.GB11604@nagual.pp.ru> <xzpadva8cy2.fsf@flood.ping.uio.no> <20020119173633.GD11604@nagual.pp.ru> <20020119174339.GG11604@nagual.pp.ru> <xzppu466xm4.fsf@flood.ping.uio.no>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Jan 19, 2002 at 18:48:03 +0100, Dag-Erling Smorgrav wrote:
> "Andrey A. Chernov" <ache@nagual.pp.ru> writes:
> > We *ALL* agree that old OPIE scheme with fake promts, in the way it was
> > implemented, is not improves security. Everybody can detect it trying two 
> > times.
> 
> Now that you've removed it, they don't even need to try twice.  How is
> that an improvement?

1) Improvement is that Problems removed (I post big message explaining 
Problems with fake prompts). Should I resent Problems message too?


It seems unclear for someone (markm) but
2) Fake prompts is not related to 3-state pam_opie commit, this
change is separate one.

-- 
Andrey A. Chernov
http://ache.pp.ru/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020119182153.GM11604>