Crypt passwords?
Why does Solaris (as of SXCE N76, at least) still use old-school unix crypt(3C) passwords? crypt is totally deprecated as a password hash, even according to the manpages included with the OS. All you have to do to fix it is set CRYPT_DEFAULT=1 in /etc/security/policy.conf, but good god, why is the default still __unix__ there? Compatibility with solaris 7? People who still use that should probably be punished. :-P
(update: Actually it turns out that better password hashes weren’t supported in solaris until Solaris 8, which is a mere seven years old - it came out in Feb 2000. Ben Rockwood wrote something more useful than I did about the matter a year ago.


