X-Spam-Check-By: sourceware.org
Message-ID: <43960252.9010106@wpkg.org>
Date: Tue, 06 Dec 2005 22:27:46 +0100
From: Tomasz Chmielewski <mangoo AT wpkg DOT org>
User-Agent: Mozilla Thunderbird 1.0.7-3mdk (X11/20051015)
MIME-Version: 1.0
To: Jim Drash <jim DOT drash AT gmail DOT com>
Cc: cygwin AT cygwin DOT com
Subject: Re: encoding scripts (so that user can't see passwords easily)?
References: <4392D119 DOT 7080409 AT wpkg DOT org> 	 <20051204173646 DOT GA28855 AT trixie DOT casa DOT cgf DOT cx> 	 <deca9ec80512042242h44317cexf2878291acddcc8a AT mail DOT gmail DOT com> 	 <7ff9c2a10512060949l72e9693bv251e0d46c36ea0e0 AT mail DOT gmail DOT com> 	 <4395E827 DOT 4070804 AT wpkg DOT org> 	 <61f6f4390512061158o5a2ef71by6e1a419c8e6499b3 AT mail DOT gmail DOT com> 	 <20051206140214 DOT A4275 AT reliant DOT immure DOT com> <4395F187 DOT 2020908 AT wpkg DOT org> 	 <Pine DOT GSO DOT 4 DOT 63 DOT 0512061540330 DOT 35 AT slinky DOT cs DOT nyu DOT edu> <61f6f4390512061320s512a55e8n84f27e486db0596 AT mail DOT gmail DOT com>
In-Reply-To: <61f6f4390512061320s512a55e8n84f27e486db0596@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com

Jim Drash schrieb:
> If someone can get physical access to the disk, then there is not a
> single thing you can do to stop someone who is:
> 
> 1) Knowledgeable
> 2) Determined
> 3) has time
> 4) is a criminal

But I could certainly stop someone who is *not* knowledgeable nor 
determined, and his "criminal cracking" gnowledge ends when he presses 
Enter after typing "grep -r password /".

Why do you think mail clients, web browsers and other software don't 
store the passwords in plain?



-- 
Tomek
http://wpkg.org
WPKG - software deployment and upgrades with Samba


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/