Re: Using unprotected Wifi

Joe Pfeiffer <pfeiffer@xxxxxxxxxxx> writes:

terryc <newsninespam-spam@xxxxxxxxxx> writes:

On Mon, 31 May 2010 12:53:06 -0400, Roy Smith wrote:

In article <slrni07k41.ecr.news@xxxxxxxxxxxxx>,
Jon Solberg <news@xxxxxxxxxxxxxxxxxxxx> wrote:

historically there has existed buggy implementations of SSH susceptible
of password sniffing and some of these are still around. Although
running against a reasonably modern client-servers pair (SSH v.2)
should be safe, keys are still a good thing.

To expand on Jon's statement, note that to find a pre-v.2
implementation, you need to set the controls on the way-back machine to
something like 15 years ago.

Blink, less that five years ago. One of the bigger linux distros and all
derivatives had it.

Just in case somebody doesn't know who you're referring to: debian.


But that was a case of weak ssh keys, right? It was not vulnerable to
sniffing. Just brute force password cracking, except that the brute
wasn't so brute - but a marshmellow.

i.e. the PROTOCOL wasn't flawed. Just the random number generator used
to generate unique keys.
.

Relevant Pages

  • Re: Using unprotected Wifi
    ... of password sniffing and some of these are still around. ... keys are still a good thing. ... But that was a case of weak ssh keys, ... Just brute force password cracking, ...
    (comp.os.linux.networking)
  • Re: Using unprotected Wifi
    ... susceptible of password sniffing and some of these are still ... pair (SSH v.2) should be safe, keys are still a good thing. ... Just brute force password cracking, ...
    (comp.os.linux.networking)
  • Re: Using unprotected Wifi
    ... susceptible of password sniffing and some of these are still ... pair (SSH v.2) should be safe, keys are still a good thing. ... Just brute force password cracking, ... The protocol, like many, was weak ...
    (comp.os.linux.networking)
  • Re: Opening ports in my firewall
    ... >> only with DSA keys, and not allowing manual password logins. ... - copy the .ssh directory to the new machine, if you control it, or ... Walter Dnes; my email address is *ALMOST* like wzaltdnes@waltdnes.org ...
    (comp.os.linux.security)
  • RE: sshd / ssh setup
    ... USA server and his windows/xp notebook to use SSH. ... followed sshd instruction and built ... and require users to submit keys. ...
    (freebsd-questions)