In regards to this giant fuckup:
http://www.ubuntu.com/usn/usn-612-2
What exactly is the impact of this vulnerability?
1) Does it let a attacker, who has listening ability on a local
network, to intercept keys? (ie reduce security of SSH to that of telnet)
2) Does it allow an attacker, who does NOT have a listening ability,
to log on to remote machines using known weak keys? (ie brute force a
fully remote machine)
Just what is the extent of this sad story?
As I use ssh and keys a lot, this means that I had to spend a lot of
time fixing all the trust network that I have. I think that I am done,
finally.
--
Due to extreme spam originating from Google Groups, and their inattention
to spammers, I and many others block all articles originating
from Google Groups. If you want your postings to be seen by
more readers you will need to find a different means of
posting on Usenet.
http://improve-usenet.org/