--- a/doc/manual.docbook	Wed Oct 14 17:30:47 2009 +0100
+++ b/doc/manual.docbook	Wed Oct 14 17:32:03 2009 +0100
@@ -390,8 +390,8 @@
 mercurial-server relies entirely on sshd to grant access to remote users.
 As a result, it runs no daemons, installs no setuid programs, and no part
 of it runs as root except the install process: all programs run as the user
-hg. And any attack on mercurial-server can only be started if the Bad Guys
-already have a public key in <filename>~hg/.ssh/authorized_keys</filename>,
+hg. Any attack on mercurial-server can only be started if the attacker
+already has a public key in <filename>~hg/.ssh/authorized_keys</filename>,
 otherwise sshd will bar the way.
 </para>
 <para>