Daniel Pocock wrote:
> It was also demonstrated with Windows 7 that users could be tricked by
> web sites that simply dimmed the background of the browser window - so
> it is not a perfect solution and I would personally prefer to see users
> referred to initiate "su" or "sudo" on their own.

Initiate "su" or "sudo" as in from a terminal? Conditioning users to
write commands in a terminal when prompted by a dialog sounds even worse
than leaking passwords. At least leaking system passwords is less
catastrophic when the system allows no remote login.



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/1370869938.18948.18.camel@glyph.nonexistent.invalid

Reply via email to