comp.security.ssh
  Home FAQ Contact Sign in
Your Ad Here
comp.security.ssh only
 
Advanced search
May 2008
motuwethfrsasuw
   1234 18
567891011 19
12131415161718 20
19202122232425 21
262728293031  22
2008
 Jan   Feb   Mar   Apr 
 May   Jun   Jul   Aug 
 Sep   Oct   Nov   Dec 
2008 2007 2006  
total
comp.security.ssh Profile…
RELATED GROUPS

POPULAR GROUPS

more...


 Up
  Ubuntu/Debian vulnerability impact?         


Author: Ignoramus17861
Date: May 13, 2008 19:27

In regards to this giant fuckup:

http://www.ubuntu.com/usn/usn-612-2

What exactly is the impact of this vulnerability?

1) Does it let a attacker, who has listening ability on a local
network, to intercept keys? (ie reduce security of SSH to that of telnet)

2) Does it allow an attacker, who does NOT have a listening ability,
to log on to remote machines using known weak keys? (ie brute force a
fully remote machine)

Just what is the extent of this sad story?

As I use ssh and keys a lot, this means that I had to spend a lot of
time fixing all the trust network that I have. I think that I am done,
finally.

--
Due to extreme spam originating from Google Groups, and their inattention
to spammers, I and many others block all articles originating
from Google Groups. If you want your postings to be seen by
more readers you will need to find a different means of
posting on Usenet.
http://improve-usenet.org/
1 Comment
  port forwarding source address         


Author: phil-news-nospam
Date: May 12, 2008 01:29

Currently, SSH has 2 ways to do address binding for port forwarding:

1. The SSH encrypted connection itself can be bound to a specific IP address
with the -b command line option (BindAddress in the config file).

2. Port forwarding can bind to a specific address on the listening host,
the local host for -D and -L (DynamicForward and LocalForward), or the
remote host for -R (RemoteForward).

What I would like to have is an option to bind the source address of the
outbound connections being forwarded.

An example with -L (LocalForward) would work like this. The ssh client will
listen to the port and optionally also the specified address on the local host.
For each connection coming in to that port, a connection is made from the
remote host to the destination host and port specified. What my suggested
option would do is specify what address that remote-to-destination connection
would come from. It would only make sense to use addresses configured on a
working interface on the remote machine.
Show full article (4.83Kb)
1 Comment
  ampicillin production ampicillin recipe ampicillin plate ampicillin 500 cheap zithromax 1         


Author: kmwkawrt
Date: May 11, 2008 09:44

ampicillin production
ampicillin recipe
ampicillin plate
ampicillin 500
cheap zithromax

+++ ANTIBIOTICS +++ ANTIBIOTICS +++ ANTIBIOTICS +++
+
+
http://jhku.net/BUY-AMPICILLIN/
http://jhku.net/BUY-AMPICILLIN/
http://jhku.net/BUY-AMPICILLIN/
http://jhku.net/BUY-AMPICILLIN/
+
+
+
+
Show full article (1.39Kb)
no comments
  Subject: Newbie with ssh-server running... Hacking attempts against me...         


Author:
Date: May 10, 2008 16:07

Dear NG,

Subject: Newbie with ssh-server running... Hacking attempts against
me... I hope this question is appropriate - My log says:

----
May 10 22:21:20 Apple com.apple.SecurityServer: Failed to authorize
right system.login.tty by process /usr/sbin/sshd for authorization
created by /usr/sbin/sshd.
May 10 22:21:20 Apple sshd[1112...
Show full article (3.65Kb)
24 Comments
  Protect yourself against Operation Sudden Fall         


Author: Woodrow.Caponera
Date: May 9, 2008 18:17

Law enforcement is now intercepting text messages,
as proven by Operation Sudden Fall in San Diego.

http://www.usdoj.gov/dea/pubs/states/newsrel/sd050608.html
http://www.signonsandiego.com/news/education/20080506-1338-bn06sdsu2.html

Don't let your personal SMS/text messages fall into
the wrong hands. Encrypt your messages with one
of these:

http://www.CryptoSMS.org
http://www.CryptoSMS.com
http://www.FortressMail.net/fortress_sms.htm
http://www.Cop2p.com/encrypted_sms.html

Be Safe, Be Encrypted, Fuck the Police!!

--
Candy, into precedents worthy and detailed, exists in line with it, envisaging nevertheless.
no comments
  SSH GUI slow         


Author: curt
Date: May 8, 2008 21:02

I used ssh -X to login and remotely run Matlab. The problem is the
performance is very slow. For example, if I minimize and then unminimize
the Matlab GUI, it takes about 11 seconds to repaint the window. This
happens when I ssh within the same server so the slowdown isn't caused by
the physical networking. Also, as a test I ran Pan and Evolution and the
performance was great - I couldn't tell that I was using ssh remotely
with those
applications.

Is this slowdown caused by Matlab and maybe other programs like it? Is
something wrong with my configuration to cause it to run slowly ?

Any ideas would be appreciated.

Thank you,
Curt
4 Comments
  Cygwin+SSH : Permission Problem         


Author: RonaldOttoValentinFischer
Date: May 8, 2008 07:16

Could somebody help me here? While I use Putty to access a
remote host via ssh, it doesn't work with Cygwin's ssh. Here
is what I have:

# This is my private key file
$ ls -l /cygdrive/h/etcsec/fischron.ppk
-rw------- 1 fischron mkgroup-l-d 802 May 8 16:06 /cygdrive/h/etcsec/
fischron.ppk

$ ls -dl etcsec
drwx------+ 1 fischron mkgroup-l-d 0 May 8 16:06 etcsec
Show full article (0.98Kb)
9 Comments
  putty focus problem in XP         


Author: bjarthur
Date: May 8, 2008 05:16

putty works fine in XP until i change the focus. upon returning to
putty, the cursor becomes black, and so not visible with the default
black background. more importantly, about half the time the
characters are also rendered black on black, making them not visible
either. strangely, this is only for text that i type. the output of
programs (mutt, vi, etc.) is totally fine. i don't think this is not
a problem with putty, as on two other XP machines i've tested, things
work fine. somehow i think my system is screwed up.

perhaps relatedly, when i cursor over the putty window, the cursor
switches to the text tool as usual. however, instead of turning white
to accommodate the default black background of putty, it stays black
and is hence not visible.

i've cleaned the registry. uninstalled putty and re-installed several
times. release 0.60. anyone have any ideas?? thanks.
2 Comments
  How to exclude MULTIPLE directories in a rsync command ?         


Author: Matthew Lincoln
Date: May 6, 2008 22:57

As I learned from the man page of rsync I can exclude a certain directory (trees)
by using the --exclude option like in

rsync .... --exclude=/proc ....

But how do I exclude multiple directory (trees) at once in such a rsync command?
The following does not work:

rsync ....
--exclude=/proc||/var||/dummy ....

Same with "&&" instead of "||"

Matthew
2 Comments
Your Ad Here
  ssh_init: cannot assign address using PSCP         


Author: aniketshah79
Date: May 6, 2008 05:47

We are using PSCP to transfer files from windows desktop to Linux
server using SSH2 and private keys. We use command as

pscp -v -i "pvt.ppk" @:/data/nohup.out C:\

It fails at the initial stage with error

ssh_init: Network error: Cannot assign requested address
no comments
1 2 3 4 5 6 7 8 9