Groups > comp.os.linux.development.apps > #258

Re: Security problem

Path	csiph.com!x330-a1.tempe.blueboxinc.net!newsfeed.hal-mli.net!feeder3.hal-mli.net!news.glorb.com!news.netfront.net!reversiblemaps.ath.cx!not-for-mail
From	Jasen Betts <jasen@xnet.co.nz>
Newsgroups	comp.os.linux.development.apps
Subject	Re: Security problem
Date	2 Sep 2011 11:06:30 GMT
Organization	Dis (not Dat) Organisation
Lines	17
Message-ID	<j3qdbm$ucn$1@reversiblemaps.ath.cx> (permalink)
References	<j3jrp5$534$1@speranza.aioe.org> <j3o9eb$jk9$1@rumours.uwaterloo.ca> <87obz4s142.fsf@araminta.anjou.terraraq.org.uk>
NNTP-Posting-Host	118.90.0.57
Mime-Version	1.0
Content-Type	text/plain; charset=UTF-8
Content-Transfer-Encoding	8bit
X-Trace	adenine.netfront.net 1314963050 42762 118.90.0.57 (2 Sep 2011 11:30:50 GMT)
X-Complaints-To	news@netfront.net
NNTP-Posting-Date	Fri, 2 Sep 2011 11:30:50 +0000 (UTC)
X-Face	?)Aw4rXwN5u0~$nqKj`xPz>xHCwgi^q+^?Ri+R(&uv2=E1Q0Zk(>h!~o2ID@6{uf8s;a +M[5[U[QT7xFN%^gR"=tuJw%TXXR'Fp~W;(T"1(739R%m0YyyvgkGoPA.$b,D.w:z+<'"=-lVT?6 {T?=R^:W5g\|E2#EhjKCa+nt":4b}dU7GYBHBxn&Td$@f%.kl^:7X8rQWd[NTc"P"u6nkisze/Q;8 "9Z{peQF,w)7UjV$c\|RO/mQW/NMgWfr5$-Z%u46"/00mx-,\R'fLPe.)^
User-Agent	slrn/pre1.0.0-18 (Linux)
Xref	x330-a1.tempe.blueboxinc.net comp.os.linux.development.apps:258

Show key headers only | View raw

On 2011-09-01, Richard Kettlewell <rjk@greenend.org.uk> wrote:

> Better still use public-key authentication and disallow password
> authentication completely, at least on anything facing a hostile
> network.

debian screwed up the PK generation code a couple of years ago
resulting in only 2^16 or so private keys being possible.

is similar happens again your PK based auth could be vulnerable too.

-- 
⚂⚃ 100% natural

--- Posted via news://freenews.netfront.net/ - Complaints to news@netfront.net ---

Back to comp.os.linux.development.apps | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

Security problem jacob navia <jacob@spamsink.net> - 2011-08-31 01:29 +0200
  Re: Security problem GangGreene <GangGreene@invalid.com> - 2011-08-30 19:47 -0400
    Re: Security problem jacob navia <jacob@spamsink.net> - 2011-08-31 02:20 +0200
    Re: Security problem David Brown <david@westcontrol.removethisbit.com> - 2011-09-02 16:19 +0200
      Re: Security problem Noob <root@127.0.0.1> - 2011-12-01 11:24 +0100
        Re: Security problem David Brown <david@westcontrol.removethisbit.com> - 2011-12-01 13:11 +0100
          Re: Security problem Rainer Weikusat <rweikusat@mssgmbh.com> - 2011-12-01 13:34 +0000
            Re: Security problem David Brown <david@westcontrol.removethisbit.com> - 2011-12-01 16:19 +0100
              Re: Security problem Rainer Weikusat <rweikusat@mssgmbh.com> - 2011-12-01 17:10 +0000
                Re: Security problem David Brown <david.brown@removethis.hesbynett.no> - 2011-12-01 23:17 +0100
                Re: Security problem Rainer Weikusat <rweikusat@mssgmbh.com> - 2011-12-01 22:34 +0000
                Re: Security problem David Brown <david@westcontrol.removethisbit.com> - 2011-12-02 10:25 +0100
                Re: Security problem Richard Kettlewell <rjk@greenend.org.uk> - 2011-12-02 10:37 +0000
                Re: Security problem Rainer Weikusat <rweikusat@mssgmbh.com> - 2011-12-02 14:44 +0000
                Re: Security problem David Brown <david@westcontrol.removethisbit.com> - 2011-12-02 17:11 +0100
                Re: Security problem André Gillibert <MetaEntropy.removeThis@gmail.com> - 2011-12-03 11:45 +0100
                Re: Security problem Noob <root@127.0.0.1> - 2011-12-05 13:26 +0100
  Re: Security problem Carlos Moreno <moreno_news@mailinator.com> - 2011-09-01 11:47 -0400
    Re: Security problem Richard Kettlewell <rjk@greenend.org.uk> - 2011-09-01 17:01 +0100
      Re: Security problem Carlos Moreno <moreno_news@mailinator.com> - 2011-09-01 15:48 -0400
        Re: Security problem Richard Kettlewell <rjk@greenend.org.uk> - 2011-09-01 22:44 +0100
          Re: Security problem Richard Kettlewell <rjk@greenend.org.uk> - 2011-09-02 14:27 +0100
      Re: Security problem Jasen Betts <jasen@xnet.co.nz> - 2011-09-02 11:06 +0000
        Re: Security problem Richard Kettlewell <rjk@greenend.org.uk> - 2011-09-02 13:49 +0100
          Re: Security problem Carlos Moreno <moreno_news@mailinator.com> - 2011-09-02 13:58 -0400
            Re: Security problem Richard Kettlewell <rjk@greenend.org.uk> - 2011-09-02 19:31 +0100
  Re: Security problem "Ersek, Laszlo" <lacos@caesar.elte.hu> - 2011-09-01 21:01 +0200

csiph-web