> You’d need to show how the design disregards security. I mostly agree with you, but don’t forget the ‘root login with empty password’ or ‘the password hint s

> You’d need to show how the design disregards security. I mostly agree with you, but don’t forget the ‘root login with empty password’ or ‘the password hint showing the password on encrypted disk unlock’ issues. I don’t see how anyone can claim that was secure by design. Sure, it was a bug, but a secure design would not have permitted that issue.