Re: login with CVS accounts on docs.php.net
| From: | Derick Rethans | Date: | Fri, 11 Jun 2004 07:18:31 +0000 |
| Subject: | Re: login with CVS accounts on docs.php.net | ||
| References: | 1 2 3 4 5 6 7 | Groups: | php.doc.web |
| Request: | Send a blank email to doc-web+get-33@lists.php.net to get a copy of this message | ||
On Thu, 10 Jun 2004, Gabor Hojtsy wrote:
> As I have seen, the bugs and master machines have the user/pass DB, plus
> Wez's blog allows us to log in with our CVS users, so I guess he also
> has a copy of the password file. I cannot estimate the security conserns
> of giving out the password file for our server, we will discuss this
> with systems@ (also CC-ed). We would need the token for
> http://master.php.net/fetch/cvspasswd.php
I don't think it's a good idea to hand it out to a server we don't
administrate ourselves, as giving out those passwords opens up commit
access to everything as a lot of passwords are *really* easy to crack.
Derick