Date: Fri, 13 Feb 2009 10:21:48 -0600 From: Josh Paetzel <josh@tcbug.org> To: =?ISO-8859-1?Q?Dag-Erling_Sm=F8rgrav?= <des@des.no> Cc: Jason Stone <freebsd-security@dfmm.org>, Lyndon Nerenberg <lyndon@orthanc.ca>, freebsd-security@freebsd.org Subject: Re: OPIE considered insecure Message-ID: <74704C56-60C9-4074-900E-15CFA735B840@tcbug.org> In-Reply-To: <86skmlm6aa.fsf@ds4.des.no> References: <200902090957.27318.mail@maxlor.com> <20090209170550.GA60223@hobbes.ustdmz.roe.ch> <alpine.BSF.2.00.0902091246280.61088@mm.orthanc.ca> <20090209134738.G15166@treehorn.dfmm.org> <86eiy5nqjz.fsf@ds4.des.no> <20090211122200.GA86644@hobbes.ustdmz.roe.ch> <86skmlm6aa.fsf@ds4.des.no>
next in thread | previous in thread | raw e-mail | index | archive | help
On Feb 11, 2009, at 7:50 AM, Dag-Erling Smørgrav wrote: > Daniel Roethlisberger <daniel@roe.ch> writes: >> Your statement is of course correct, logging in from untrusted >> machines can never be secure. However, OPIE still raises the bar >> on the required capabilities for an attack (active, real-time >> attack versus passive keylogging / data dumping). > > This conversation reminds me of a flipchart outside the terminal > room at > an early BSDCon, with a list of passwords sniffed from the network and > something like "if your password is listed below, you should consider > using SSH" :) > > DES > -- > Dag-Erling Smørgrav - des@des.no This conversation reminds me of: http://xkcd.com/538/ Thanks, Josh Paetzel
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?74704C56-60C9-4074-900E-15CFA735B840>