Matan Ziv-Av <[EMAIL PROTECTED]> writes:
> On Wed, 5 Jul 2000, Ira Abramov wrote:
> > because bad habits and work practices follow you to the workplace.
> > Some disciplines are important to keep even when it's not a "live
> > server".
Hear, hear!
> But if I am not a sys admin?
I am not (apart from my home computer).
> Do you run Quake on you server, latest
> 2.4.0-test3-pre2-ac2-riel7-aa2 kernel?
I hope he doesn't, not on a production machine. I hope he uses a test
box for that.
>Is that a reason not to run it on
> your home machine?
If you have a spare computer, or if there is nothing important on your
only one, go ahead and run untested stuff there. I wouldn't.
> Should I have a 12 character password with capitals+symbols+digits on my
> home machine?
Yes, but 8 characters would suffice, too, provided they are mixed-case
with special characters, and cannot be easily guessed.
> Should I have a password at all on my home machine?
Definitely.
> The answer is simple. Unix model of security is almost useless in a
> single user machine.
I disagree strongly. At the very least have a user account and a root
one, keep them very separate, and always think thrice before you type
su. Especially if the machine is connected to the internet. Look
through this list's archives for some war stories told when someone
asked why crackers would try to break into one's home box.
--
Oleg Goldshmidt <[EMAIL PROTECTED]>
"... We work but wit, and not by witchcraft;
And wit depends on dilatory time." [Shakespeare]
=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]