From owner-freebsd-questions@FreeBSD.ORG Tue Aug 8 23:32:47 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 69ED216A4DD; Tue, 8 Aug 2006 23:32:47 +0000 (UTC) (envelope-from fbsd-questions@mawer.org) Received: from mail-ihug.icp-qv1-irony2.iinet.net.au (ihug-mail.icp-qv1-irony2.iinet.net.au [203.59.1.196]) by mx1.FreeBSD.org (Postfix) with ESMTP id 757A643D55; Tue, 8 Aug 2006 23:32:45 +0000 (GMT) (envelope-from fbsd-questions@mawer.org) Received: from 203-206-173-235.perm.iinet.net.au (HELO [127.0.0.1]) ([203.206.173.235]) by mail-ihug.icp-qv1-irony2.iinet.net.au with ESMTP; 09 Aug 2006 07:32:43 +0800 X-BrightmailFiltered: true X-Brightmail-Tracker: AAAAAA== X-IronPort-AV: i="4.07,223,1151856000"; d="scan'208"; a="583963240:sNHT271275898" Message-ID: <44D91F02.90107@mawer.org> Date: Wed, 09 Aug 2006 09:32:18 +1000 From: Antony Mawer User-Agent: Thunderbird 1.5.0.5 (Windows/20060719) MIME-Version: 1.0 To: "Marc G. Fournier" References: <20060807003815.C7522@ganymede.hub.org> <20060808102819.GB64879@augusta.de> <20060808153921.V7522@ganymede.hub.org> <44D8EC98.8020801@utdallas.edu> <20060808201359.S7522@ganymede.hub.org> In-Reply-To: <20060808201359.S7522@ganymede.hub.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Paul Schmehl , freebsd-questions@freebsd.org Subject: Re: BSDstats Project v2.0 ... X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Aug 2006 23:32:47 -0000 On 9/08/2006 9:16 AM, Marc G. Fournier wrote: >> Can you tell me exactly what you do with those two pieces of data? Is >> there any way that information would be accessible from the internet? > > Absolutely nothing else we do with it ... it just gives us a unique key > to work with ... in fact, assuming each of your servers use a different > IP, there is no reason you couldn't do the uname trick above to hide the > hostname ... > > Unless someone breaks into the server, or database, somehow, the data > isn't accessible ... What if we improved upon this - if instead of storing the hostname and IP address, we stored a one-way hash of this information? OpenSSH in recent versions takes the same approach with its authorized_keys files... -Antony