Date:  Mon, 29 Sep 2008 16:35:48 -0500
From:  Chris Gebhardt - VIRTBIZ Internet <cobaltfacts (at mark) virtbiz.com>
Subject:  [coba-e:14120] Re: MySQL Database Setup Interface
To:  coba-e (at mark) bluequartz.org
Message-Id:  <48E14A34.2020500 (at mark) virtbiz.com>
In-Reply-To:  <200809292327.08385.bq (at mark) solarspeed.net>
References:  <C506812F.33820%webmaster (at mark) muntada.com> <48E12483.1080000 (at mark) probass.com> <7B51314796AE45BAADE5E056EB11E182 (at mark) OfficeKen> <200809292327.08385.bq (at mark) solarspeed.net>
X-Mail-Count: 14120

Michael Stauber wrote:
> Hi Ken,
> 
>> To be clear; it is possible to enable the Web Apps for siteadmins, but it's
>> not a good idea unless you trust them to set up better passwords after they
>> install it.
> 
> One of the updates that's currently in SVN for BlueQuartz adds strong password 
> checks to all password fields in the GUI. With visible confirmation if an 
> entered password is safe or not - while the password is being entered.
> 
> That could help a little in that regards.

If I understand correctly, I think the issue with the password strength 
insofar as the Web Apps go is that there are very weak default passwords 
for the applications themselves.   For instance, if you set up a 
WordPress install it will config with default admin credentials.

Then it's up to the user to change the password to something different 
(whether or not it's any stronger could be questioned much of the time, 
but at least it wouldn't be default!)

Anyhow, that's not the fault of the installer or the app.  Just a matter 
of many times the customer is not very security minded and that can lead 
to trouble.

As far as the MySQL setup goes in the BQ GUI (in order to shift a little 
closer to topic) Michael's suggestion for the MySQL config sounds pretty 
good.  Cannot wait to give it a look!

-- 
Chris Gebhardt
VIRTBIZ Internet Services
Access, Web Hosting, Colocation, Dedicated
www.virtbiz.com | toll-free (866) 4 VIRTBIZ