Minnow swiki password policy (was Re: Yet another vandalized wiki page..)

[Ken Causey]

On Tue, 2005-09-06 at 14:51 -0400, Doug Way wrote:
> Hello minnow swiki admins & sqf box admins.
> 
> I just fixed the hacked swiki page mentioned on squeak-dev below, using
> the special swiki admin password, so that it's reverted to its original
> state and unlocked for now.
> 
> I happened to notice that the top swiki page
> (http://minnow.cc.gatech.edu/squeak/1) was locked with a password other
> than "squeak" or "viewpoints".  I thought we were using one of these for
> a standard public password that most squeak regulars would know, without
> needing the admin password.  (As far as I know, there has never been a
> case of someone defacing the swiki who actually knew one of these public
> passwords... it's always been unlocked pages.)  So, I set the top page
> password to "viewpoints".

It's possible that I made a mistake.  I needed to modify this page and
at the time the only password I could think of was 'viewpoints' and it
didn't seem to be working.  I asked for and Jochen gave me the 'special'
password which I used to unlock the page and edit it.  It may be that I
mistakenly locked the page with that special password.  Or it may simply
be that I did not replace the previously set password.  I wasn't in fact
sure what it should be.

Related to this every time I've fixed a defaced page lately I've been
locking it with 'viewponts'.

Ken
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.squeakfoundation.org/pipermail/box-admins/attachments/20050906/befaf090/attachment.pgp