From owner-cvs-all Mon Nov 29 9:53:56 1999 Delivered-To: cvs-all@freebsd.org Received: from peach.ocn.ne.jp (peach.ocn.ne.jp [210.145.254.87]) by hub.freebsd.org (Postfix) with ESMTP id C8A20152A0; Mon, 29 Nov 1999 09:53:51 -0800 (PST) (envelope-from dcs@newsguy.com) Received: from newsguy.com (p02-dn03kiryunisiki.gunma.ocn.ne.jp [210.232.224.131]) by peach.ocn.ne.jp (8.9.1a/OCN) with ESMTP id CAA07233; Tue, 30 Nov 1999 02:53:49 +0900 (JST) Message-ID: <38421058.B86FD092@newsguy.com> Date: Mon, 29 Nov 1999 14:34:16 +0900 From: "Daniel C. Sobral" X-Mailer: Mozilla 4.7 [en] (Win98; I) X-Accept-Language: en,pt-BR,ja MIME-Version: 1.0 To: Brian Fundakowski Feldman Cc: "Daniel C. Sobral" , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sys/boot/forth loader.4th loader.conf.5 support.4th References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk Brian Fundakowski Feldman wrote: > > On Wed, 24 Nov 1999, Daniel C. Sobral wrote: > > > dcs 1999/11/24 09:56:41 PST > > > > Modified files: > > sys/boot/forth loader.4th loader.conf.5 support.4th > > Log: > > Add silly password feature. If people want to depend on a flawed > > security measures, so be it. It costs us almost nothing. > > Can you not find a decent Forth cryptographic hashing function? It > would make things a lot less "silly". That is beside the point. Protecting the boot process gains you nothing. You either protect the console, or any security measure is inherently flawed. The main reason for this sillyness is, I'm ashamed to admit, the "lilo has it" argument. People think it's cool. Ok, let them. Coolness factor, if the cost is low, is ok. And, in the end, lilo's password is also stored as plain-text. Frankly, if someone comes complaining bitterly about creeping featurism and the likes, I'm might just as well back it out. :-) Maybe put the code in /usr/share/examples/bootforth, though people who like coolness also happens to demand it pre-installed. -- Daniel C. Sobral (8-DCS) who is as social as a wampas dcs@newsguy.com dcs@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message