[irc.git] / software / RELEASES / ircservices / achurch.org / services / lists / ircservices / 2001 / 001646.html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
 <HEAD>
   <TITLE> [IRCServices] Re: [Andy Smith - IRCServices]
   </TITLE>
   <LINK REL="Index" HREF="index.html" >
   <LINK REL="made" HREF="mailto:ircservices%40ircservices.za.net?Subject=%5BIRCServices%5D%20Re%3A%20%5BAndy%20Smith%20-%20IRCServices%5D&In-Reply-To=">
   <META NAME="robots" CONTENT="index,nofollow">
   <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
   <LINK REL="Previous"  HREF="001644.html">
   <LINK REL="Next"  HREF="001647.html">
 </HEAD>
 <BODY BGCOLOR="#ffffff">
   <H1>[IRCServices] Re: [Andy Smith - IRCServices]</H1>
    <B>Strider</B> 
    <A HREF="mailto:ircservices%40ircservices.za.net?Subject=%5BIRCServices%5D%20Re%3A%20%5BAndy%20Smith%20-%20IRCServices%5D&In-Reply-To="
       TITLE="[IRCServices] Re: [Andy Smith - IRCServices]">strider at chatcircuit.com
       </A><BR>
    <I>Mon Mar 19 17:03:00 PST 2001</I>
    <P><UL>
        <LI>Previous message: <A HREF="001644.html">[IRCServices] Re: [Andy Smith - IRCServices]
</A></li>
        <LI>Next message: <A HREF="001647.html">[IRCServices] Re: [Andy Smith - IRCServices]
</A></li>
         <LI> <B>Messages sorted by:</B> 
              <a href="date.html#1646">[ date ]</a>
              <a href="thread.html#1646">[ thread ]</a>
              <a href="subject.html#1646">[ subject ]</a>
              <a href="author.html#1646">[ author ]</a>
         </LI>
       </UL>
    <HR>  
<!--beginarticle-->
<PRE>You need to keep in mind that not every Tom Dick and Harry is the most
computer literate person in the world or knows about making good passwords.
Many people try to make passwords they can remember, like the name of their
dog, their address, etc etc. It is very bad practice, but there is no way to
just go out to the world and tell everyone their password is insecure, blah
blah blah. Am I not right? I do try to tell my users to use strong
passwords. Some do, some don't. You don't just abandone those who chose not
to, because that is the majority, whether we like it or not.

If any feel this is a big issue and want it fixed, I suggest making a logon
news, motd entry, and a web page for your irc server stating the fact you
want your users to make strong passwords. This will NOT force every single
user to do so, so don't be surprised if it doesn't even work.

Suggestion on a feature:
Allow services to make a randomly generated password. Perhaps /msg nickserv
register RANDOM email would do it rather than set it to random. Since the
services does reply to you with the password you entered, the user has a
chance to write down the password.

Beau (Strider) Steward
chatcircuit administrator and 6bit band member
<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">strider at chatcircuit.com</A>        www.chatcircuit.com
<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">ircadmin at chatcircuit.com</A>     irc.chatcircuit.com
<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">strider at 6bit.net</A>                    www.6bit.net
----- Original Message -----
From: &quot;Andy Smith&quot; &lt;<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">andy at strugglers.net</A>&gt;
To: &lt;<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">ircservices at ircservices.za.net</A>&gt;
Sent: Monday, March 19, 2001 8:20 AM
Subject: Re: [IRCServices] Re: [Andy Smith - IRCServices]


&gt;<i> On Sun, 18 Mar 2001 17:42:52 +0200, Partizanu &lt;<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">silvius at expres.ro</A>&gt; wrote:
</I>&gt;<i>
</I>&gt;<i> &gt;Imagine this:
</I>&gt;<i> &gt;Some user, let`s say Guest007 come to you and say:
</I>&gt;<i> &gt;- Hello my dear services admin! I have a problem. User BadGuest stole my
</I>password
&gt;<i> &gt;and I want my nick back. Can you do something about this?
</I>&gt;<i>
</I>&gt;<i> In this situation, BadGuest was given the password by the user, or else
</I>the
&gt;<i> user did something to allow BadGuest to easily guess it.  That is the
</I>user's
&gt;<i> problem.
</I>&gt;<i>
</I>&gt;<i> The other slim possibility is that the IRC network itself has someone
</I>&gt;<i> sniffing passwords on it.  That is a problem that needs to be solved, and
</I>no
&gt;<i> part of services can solve it for you.
</I>&gt;<i>
</I>&gt;<i> The vast majority of &quot;password stealing&quot; incidents are down to users
</I>sharing
&gt;<i> their passwords.
</I>&gt;<i>
</I>&gt;<i> --
</I>&gt;<i> Andy Smith &lt;<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">andy at strugglers.net</A>&gt;
</I>&gt;<i>
</I>&gt;<i> -----------------------------------------------------------
</I>&gt;<i> To unsubscribe, mail <A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">ircservices-request at ircservices.za.net</A>
</I>&gt;<i> with the word UNSUBSCRIBE in the subject of the mail.
</I>&gt;<i> <A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">http://www.ircservices.za.net/mailman/listinfo/ircservices</A>
</I>&gt;<i>
</I>


</PRE>

<!--endarticle-->
    <HR>
    <P><UL>
        <!--threads-->
	<LI>Previous message: <A HREF="001644.html">[IRCServices] Re: [Andy Smith - IRCServices]
</A></li>
	<LI>Next message: <A HREF="001647.html">[IRCServices] Re: [Andy Smith - IRCServices]
</A></li>
         <LI> <B>Messages sorted by:</B> 
              <a href="date.html#1646">[ date ]</a>
              <a href="thread.html#1646">[ thread ]</a>
              <a href="subject.html#1646">[ subject ]</a>
              <a href="author.html#1646">[ author ]</a>
         </LI>
       </UL>

</body></html>
Commit	Line	Data
3bd189cb JR	1	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
	2	<HTML>
	3	<HEAD>
	4	<TITLE> [IRCServices] Re: [Andy Smith - IRCServices]
	5	</TITLE>
	6	<LINK REL="Index" HREF="index.html" >
	7	<LINK REL="made" HREF="mailto:ircservices%40ircservices.za.net?Subject=%5BIRCServices%5D%20Re%3A%20%5BAndy%20Smith%20-%20IRCServices%5D&In-Reply-To=">
	8	<META NAME="robots" CONTENT="index,nofollow">
	9	<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
	10	<LINK REL="Previous" HREF="001644.html">
	11	<LINK REL="Next" HREF="001647.html">
	12	</HEAD>
	13	<BODY BGCOLOR="#ffffff">
	14	<H1>[IRCServices] Re: [Andy Smith - IRCServices]</H1>
	15	<B>Strider</B>
	16	<A HREF="mailto:ircservices%40ircservices.za.net?Subject=%5BIRCServices%5D%20Re%3A%20%5BAndy%20Smith%20-%20IRCServices%5D&In-Reply-To="
	17	TITLE="[IRCServices] Re: [Andy Smith - IRCServices]">strider at chatcircuit.com
	18	</A><BR>
	19	<I>Mon Mar 19 17:03:00 PST 2001</I>
	20	<P><UL>
	21	<LI>Previous message: <A HREF="001644.html">[IRCServices] Re: [Andy Smith - IRCServices]
	22	</A></li>
	23	<LI>Next message: <A HREF="001647.html">[IRCServices] Re: [Andy Smith - IRCServices]
	24	</A></li>
	25	<LI> <B>Messages sorted by:</B>
	26	<a href="date.html#1646">[ date ]</a>
	27	<a href="thread.html#1646">[ thread ]</a>
	28	<a href="subject.html#1646">[ subject ]</a>
	29	<a href="author.html#1646">[ author ]</a>
	30	</LI>
	31	</UL>
	32	<HR>
	33	<!--beginarticle-->
	34	<PRE>You need to keep in mind that not every Tom Dick and Harry is the most
	35	computer literate person in the world or knows about making good passwords.
	36	Many people try to make passwords they can remember, like the name of their
	37	dog, their address, etc etc. It is very bad practice, but there is no way to
	38	just go out to the world and tell everyone their password is insecure, blah
	39	blah blah. Am I not right? I do try to tell my users to use strong
	40	passwords. Some do, some don't. You don't just abandone those who chose not
	41	to, because that is the majority, whether we like it or not.
	42
	43	If any feel this is a big issue and want it fixed, I suggest making a logon
	44	news, motd entry, and a web page for your irc server stating the fact you
	45	want your users to make strong passwords. This will NOT force every single
	46	user to do so, so don't be surprised if it doesn't even work.
	47
	48	Suggestion on a feature:
	49	Allow services to make a randomly generated password. Perhaps /msg nickserv
	50	register RANDOM email would do it rather than set it to random. Since the
	51	services does reply to you with the password you entered, the user has a
	52	chance to write down the password.
	53
	54	Beau (Strider) Steward
	55	chatcircuit administrator and 6bit band member
	56	<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">strider at chatcircuit.com</A> www.chatcircuit.com
	57	<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">ircadmin at chatcircuit.com</A> irc.chatcircuit.com
	58	<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">strider at 6bit.net</A> www.6bit.net
	59	----- Original Message -----
	60	From: "Andy Smith" <<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">andy at strugglers.net</A>>
	61	To: <<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">ircservices at ircservices.za.net</A>>
	62	Sent: Monday, March 19, 2001 8:20 AM
	63	Subject: Re: [IRCServices] Re: [Andy Smith - IRCServices]
	64
65
66	><i> On Sun, 18 Mar 2001 17:42:52 +0200, Partizanu <<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">silvius at expres.ro</A>> wrote:
67	</I>><i>
68	</I>><i> >Imagine this:
69	</I>><i> >Some user, let`s say Guest007 come to you and say:
70	</I>><i> >- Hello my dear services admin! I have a problem. User BadGuest stole my
71	</I>password
72	><i> >and I want my nick back. Can you do something about this?
73	</I>><i>
74	</I>><i> In this situation, BadGuest was given the password by the user, or else
75	</I>the
76	><i> user did something to allow BadGuest to easily guess it. That is the
77	</I>user's
78	><i> problem.
79	</I>><i>
80	</I>><i> The other slim possibility is that the IRC network itself has someone
81	</I>><i> sniffing passwords on it. That is a problem that needs to be solved, and
82	</I>no
83	><i> part of services can solve it for you.
84	</I>><i>
85	</I>><i> The vast majority of "password stealing" incidents are down to users
86	</I>sharing
87	><i> their passwords.
88	</I>><i>
89	</I>><i> --
90	</I>><i> Andy Smith <<A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">andy at strugglers.net</A>>
91	</I>><i>
92	</I>><i> -----------------------------------------------------------
93	</I>><i> To unsubscribe, mail <A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">ircservices-request at ircservices.za.net</A>
94	</I>><i> with the word UNSUBSCRIBE in the subject of the mail.
95	</I>><i> <A HREF="http://www.ircservices.za.net/mailman/listinfo/ircservices">http://www.ircservices.za.net/mailman/listinfo/ircservices</A>
96	</I>><i>
97	</I>
98
99
100	</PRE>
101
102	<!--endarticle-->
103	<HR>
104	<P><UL>
105	<!--threads-->
106	<LI>Previous message: <A HREF="001644.html">[IRCServices] Re: [Andy Smith - IRCServices]
107	</A></li>
108	<LI>Next message: <A HREF="001647.html">[IRCServices] Re: [Andy Smith - IRCServices]
109	</A></li>
110	<LI> <B>Messages sorted by:</B>
111	<a href="date.html#1646">[ date ]</a>
112	<a href="thread.html#1646">[ thread ]</a>
113	<a href="subject.html#1646">[ subject ]</a>
114	<a href="author.html#1646">[ author ]</a>
115	</LI>
116	</UL>
117
118	</body></html>