[conspire] People suck at key management (was: Siduction ... trust path to ISOs?)

Rick Moen rick at linuxmafia.com
Thu Feb 28 14:08:33 PST 2019


I wrote:

> (Notice the bit about 'Credentials' for some?  Those are live distros
> where you'll need to know their burned-in username/passwords to use them
> at all.)

Turns out, _many_ current distros pose this problem (requiring further
annotation of my README.txt), and mostly they suck at letting the
novice know how to login.  One shining exception is Siduction, which 
plasters the information onto the GRUB startup screen:
https://imgur.com/ZxDRw7i

My point is, live distros being popular with novices (e.g., Ubuntu
dropping the otherwise superior 'alternate' images that use Debian's d-i
installer in favour of their live image with their own installer), it's 
a bit tragic if such a novice brings home a distro from a LUG meeting
but then cannot figure out how to login (or can login but doesn't know
how to escalate to root).

So, I'm making sure I keep that information handy for CABAL's distro
colleciton.  Revised README.txt:



Maximum file size on FAT32 is 4,294,967,295 bytes.

Collection:

antiX 17,3.1:  i386, amd64:  full.  Credentials demo, demo  root, root.
Blue Collar Linux initial release:  Probably i386.  Credentials liveuser, liveuser.  No gpg verification.
Bodhi Linux 5.0.0:  amd64.  No gpg verification.  Credentials bodhi, [NOPW] (has sudo root).
CentOS 7.6.1810:  amd64:  Minimal, netinstall.
Debian-unofficial-with-nonfree-firmware 9.8.0 'stretch':  i386, amd64:  GNOME DVD, netinst,
Debian Live:  i386, amd64.  LXDE, XFCE.  Credentials user, live (has sudo root).
Devuan ascii 2.0.0:  amd64:  DVD, netinst.
Fedora 29:  amd64:  Workstation netinst, Server, Server netinst.
Fedora Live 29:  amd64,  Workstation.  Credentials liveuser, [NOPW], root, [NOPW].
GParted Live 0.33.0-1:  amd64.  Credentials user, live (has sudo root).
Kubuntu 18.04.2 LTS 'Bionic Beaver':  i386, amd64:  Desktop.  Credentials ubuntu, [NOPW] (has sudo root).
Linux Mint 19.1 'Tessa':  amd64:  XFCE, Cinnamon.  Credentials mint, [NOPW] (has sudo root).
Lubuntu (w/LXQt) 18.10 'Cosmic Cuttlefish':  i386, amd64.  Credentials lubuntu, [NOPW] (has sudo root).
Lubuntu (w/LXDE) 18.04.2 LTS 'Bionic Beaver':  i386, amd64:  Desktop.  Credentials lubuntu, [NOPW] (has sudo root).
Lubuntu (w/LXDE) 10.04 LTS 'Bionic Beaver':  i386, amd64:  Alternate.
Manjaro 18.0.3 Stable:  amd64:  XFCE.  Credentials manjaro, manjaro (has sudo root).
MX Linux 18.1:  i386, amd64:  XFCE.  Credentials demo, demo  root, root.
Refracta 9 20190206-1724:  i386, amd64:  XFCE.  Credentials root, root  user, user.
Siduction 18.0.3 201805132142 'patience':  amd64:  LXQt.  No gpg verification.  Credential siducer, live (has sudo root).
SystemRescueCd 6.0.0:  amd64.  No gpg verification.  Credentials root, [NOPW].
SystemRescueCd 5.3.2:  i386.  No gpg verification.  Credentials root, [NOPW].
Ubuntu 18.04.2 LTS 'Bionic Beaver':  amd64:  GNOME Desktop, Live Server.  Credentials ubuntu, [NOPW] (has sudo root).
Ubuntu 18.10 'Cosmic Cuttlefish':  amd64:  GNOME Desktop, Live Server.  Credentials ubuntu, [NOPW] (has sudo root).
Xubuntu 18.04.2 LTS 'Bionic Beaver':  i386, amd64:  Desktop.  Credentials xubuntu, [NOPW] (has sudo root).





More information about the conspire mailing list