From owner-freebsd-security@FreeBSD.ORG  Mon Jun 11 15:12:10 2012
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id D197A1065670
	for <freebsd-security@freebsd.org>;
	Mon, 11 Jun 2012 15:12:10 +0000 (UTC) (envelope-from des@des.no)
Received: from smtp.des.no (smtp.des.no [194.63.250.102])
	by mx1.freebsd.org (Postfix) with ESMTP id 51D658FC1A
	for <freebsd-security@freebsd.org>;
	Mon, 11 Jun 2012 15:12:10 +0000 (UTC)
Received: from ds4.des.no (smtp.des.no [194.63.250.102])
	by smtp.des.no (Postfix) with ESMTP id 9409A68F4;
	Mon, 11 Jun 2012 15:12:09 +0000 (UTC)
Received: by ds4.des.no (Postfix, from userid 1001)
	id 6DAAF9F2D; Mon, 11 Jun 2012 17:12:09 +0200 (CEST)
From: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= <des@des.no>
To: Robert Simmons <rsimmons0@gmail.com>
References: <86r4tqotjo.fsf@ds4.des.no> <4FD334BE.4020900@sentex.net>
	<fe8cae35d2bd014f8b81d264fa024ba4.squirrel@eternamente.info>
	<4FD350EF.6080802@sentex.net>
	<CA+QLa9CNs_n35G2mNYDFWsjvhPJKKyBT9kjgN-evPX=Jr4Sk2Q@mail.gmail.com>
Date: Mon, 11 Jun 2012 17:12:09 +0200
In-Reply-To: <CA+QLa9CNs_n35G2mNYDFWsjvhPJKKyBT9kjgN-evPX=Jr4Sk2Q@mail.gmail.com>
	(Robert Simmons's message of "Sat, 9 Jun 2012 16:16:55 -0400")
Message-ID: <86mx49nara.fsf@ds4.des.no>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/23.3 (berkeley-unix)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Cc: freebsd-security@freebsd.org
Subject: Re: Default password hash
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 11 Jun 2012 15:12:10 -0000

Robert Simmons <rsimmons0@gmail.com> writes:
> Mike Tancsa <mike@sentex.net> writes:
> > change the users passwd to something new, or just use the old
> > passwd, but re-enter it
> Bad idea.  Never reuse an old password.

What's an even worse idea is to learn such things by rote and spew them
back out without ever reflecting on what they mean or whether they even
apply to the current situation...

DES
--=20
Dag-Erling Sm=C3=B8rgrav - des@des.no