http://qs1969.pair.com?node_id=274031


in reply to Re: Secure Perlmonks
in thread Secure Perlmonks

Well, I just wondered the scenario to which such concern is caused? For one, Perl Monks generates a random password for you, so its not like you're using a password from somewhere else, for two, there's not a whole lot of information that they keep on you.

If someone is taking the time to sniff packets on your network, then you have likely got a lot more to worry about then just your perlmonks password. I'm a security professional, and I'm extremely paranoid about these sort of things, but I find no real cause for concern here.

Also you should consider what kind of network you are on. Say you are at work, well then its likely you're on a switched network. If that's the case you have little to worry about unless you are worried that perlmonks.org is sniffing your passwords, since only the target machine would be able to catch the packets... that is of course unless you have someone on your switched network that knows how to do ARP poisoning, but that takes a level of expertise and patience.

If you are worried about hackers on your network, and you are worried about someone doing ARP poisoning to sniff your packets, well, you should be much more worried that the person may have already hacked your machine and created a back door account! Cheers