On that topic (because it’s been a debate of the few geeks I know and hang out with! LoL!)

Which method would you recommend?:

Changing the root password every 3 to 6 months?
or
Creating such a complex and lengthy password so as to make it hard to crack?

Curious to hear your thoughts.

Aside from being contrary to the ethos of open-source software, your purpose is security through obscurity.

This not only doesn’t work as those with truly malicious intent, and thus actively looking for or making themselves tools like these, will have early access to ways to exploit systems that the general public wouldn’t even know exist but it would also be dangerous as it would give a false sense of security.

Having said that, in this particular case, to use this tool one would have to know the root password already and if you have that then you already have complete control of the system.

@Arsalan

You can only secure your Linux system to prevent any one with malicious intend from using this tool on it.

@Eddie G.

The tool is out there, so any one with malicious thoughts can used it. But we our aim simply to keep Linux users aware of it’s existence and the dangers involved.

As you have stated, do whatever is possible to prevent this from ever being able to run on your Linux boxes. Thanks for the concern and feedback.