Hi,
yes we are a bit too relaxed about this. I recommend that the sites
change their
passwords locally and keep it in a file that is not maintained in CVS.
markus
On Monday, Nov 10, 2003, at 20:34 Europe/Zurich, Debreczeni Gergely
wrote:
> Hi,
>
> Just a proposal:
> Since google search "lcg cvs" gives out the cvs
> reprository as the first entry, it is very
> easy to find node config files...
>
> ! I would recommend not to store the root and user passwords in CVS !
>
> It took me only 3 ours (on a AMD ATHLON 2000+) to decrypt a 5 letter
> long
> passwd which contains capital letters and numbers...
> A 6 letter long would take 211 ours ... but I have 50 processors ;-))))
>
> cheers
> Gergo
>
>
> --
>
>
************************************************************************
*******
Markus Schulz
CERN IT
|