F13: only others user is available at login

Adam Williamson awilliam at redhat.com
Tue Feb 23 01:54:03 UTC 2010


On Mon, 2010-02-22 at 09:59 +0000, Alan Milnes wrote:


> Agree 100%.
> 
> To login you need the username and password - why help the bad guys by
> giving them 50% of the information they need?

The user name is not intended to be a secret token, it's simply an
identifier. As Matthias says, this level of paranoia just doesn't match
our standard configuration. Or to put it more brutally, if this level of
'threat' worries you, you should *definitely* not be running Fedora in a
default configuration, as its open to much higher (but still pretty tiny
for most practical uses) levels of 'threat'.
-- 
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Fedora Talk: adamwill AT fedoraproject DOT org
http://www.happyassassin.net



More information about the test mailing list