RE: RE: FW: Which Red Hat Enterprise Linux is for you?

["Renee Lee" <drlee@xxxxxxxxxxxxxx>]

-----Original Message-----
From: redhat-migration-list-admin@xxxxxxxxxx
[mailto:redhat-migration-list-admin@xxxxxxxxxx] On Behalf Of Jeremy Hogan
Sent: Thursday, December 11, 2003 6:06 PM
To: redhat-migration-list@xxxxxxxxxx
Subject: RE: RE: FW: Which Red Hat Enterprise Linux is for you?


On Wed, 2003-12-10 at 22:48, Renee Lee wrote:
Some deleted

>> 
>> FROM MY POINT OF VIEW, REDHAT BY INCLUDING ANY ACCOUNT INFORMATION HAS 
>> BREACHED THEIR RESPONSIBILITY TO KEEP PRIVILEGED INFORMATION PRIVATE!!!!

>I'm less concerned with your subjective opinion than our privacy policy
which has not been violated. All >the while you were a happy RHN customer
alerts included your log in name as a salutation. 

No easer but when you have a VALID USER NAME YOU ARE HALF WAY THERE!!!!
Funny, I have just looked at e-mails from this group for about the last year
and the only reference is to the e-mail address you send mail to. I find
no direct reference pointing out what the user name is for login.  Would
you like me to send you the last under the brim to you for verification?
I may be over looking it but I do not see this information in a normal
message.


>You seem to think that it's easier to guess a password once you have a
username. This is not the case 
>unless they are the same.

Not easer to guess but a lot faster that having to use two variables at the
same time.


>We advise against weak passwords.
But more important, do you require a minium standard for passwards used on
your Site?

>> 
>> I hope other users of your site agree this is a business practice that
needs
>> to be stopped and may be in violation of your own privacy policy!!!

>I guess once you actually figure out that your password is not anywhere in
the thread, and read our
>privacy policy (rather than guessing what "may be in violation") you'd know
better. RHN users can turn
>off the e-mail alerts. 

I just did read it again and I suggest you read it.
The following is the only place you even mention the word "Password":

We collect information in other ways, such as running contests on our site
and at trade shows, in which we ask you for contact information (like your
email address), unique identifiers (like your password), and demographic
information (like your occupation). We may use data from these contests and
trade shows to contact you or to allow appropriate business partners to
contact you. If you do not wish to be contacted, we ask that you refrain
from participating in these promotions.


I also read your Legal statement and it also does not say anything about
passwords.

Where do you talk about passwords and suggest how to form a secure password
or give a warning
about week passwords?

What use is it to turn off e-mail alerts when this is the only notification
of
updates and what the update contains?

Renee Lee

>--jeremy


_______________________________________________
Redhat-migration-list mailing list Redhat-migration-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/redhat-migration-list


_______________________________________________
Redhat-migration-list mailing list
Redhat-migration-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/redhat-migration-list