Skip to content

重装系统后的密码安全问题 #139

Description

@Jaoyo

-pwd/-password '': you can pre-specify ssh password for target installing system. Native installation methods for Redhat series, Debian/Kali could be supported, not suitable for AlpineLinux and those OS which will be installed by "Overwriting Packaged Image Mode"(dd) method like Ubuntu, Windows and Redhat installations(only in environments of low memory capacity). A couple of apostrophe includes between the whole password is recommend, if there is one and more apostrophes in the password, you should use " '\ " to replace the original apostrophe to prevent it's could not be expressed and handled correctly in the shell! default is 'LeitboGi0ro'.

文档显示ubuntu系统不支持使用这个自定义passwd命令

这会导致新系统会使用默认的密码LeitboGi0ro

即使你及时修改密码,也会有时间差导致被其他机器侵入,植入木马

比如我就在完成重装几分钟之内被https://sexy.pp.ua/攻击了

建议

默认密码用随机密码替代LeitboGi0ro,这会大大提高安全性

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions