From owner-cvs-all Sat Jan 19 8:49:43 2002 Delivered-To: cvs-all@freebsd.org Received: from nagual.pp.ru (pobrecita.freebsd.ru [194.87.13.42]) by hub.freebsd.org (Postfix) with ESMTP id CBAAE37B402; Sat, 19 Jan 2002 08:49:37 -0800 (PST) Received: (from ache@localhost) by nagual.pp.ru (8.11.6/8.11.6) id g0JGnOU11244; Sat, 19 Jan 2002 19:49:24 +0300 (MSK) (envelope-from ache) Date: Sat, 19 Jan 2002 19:49:24 +0300 From: "Andrey A. Chernov" To: Mark Murray Cc: Kris Kennaway , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/lib/libpam/modules/pam_opie pam_opie.c Message-ID: <20020119164924.GE10976@nagual.pp.ru> References: <20020119143617.GB9803@nagual.pp.ru> <200201191622.g0JGMUt22213@grimreaper.grondar.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200201191622.g0JGMUt22213@grimreaper.grondar.org> User-Agent: Mutt/1.3.24i Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sat, Jan 19, 2002 at 16:22:30 +0000, Mark Murray wrote: > > > Nothing to it; you'd store a few bytes in /var/run or somewhere, and > > > hash them with the provided username to generate the fake challenge. > > > > And your hash provide random numbers instead of constantly decreased as=20 > > they expected be (by intruder too). > > Nope. The hash is based on things that don't change very often, so it > will be constant for most attacks. As the intruder is not sucessfully > breaking in, there MUST BE NO decrement. But if intruder sees constant code several days and the next day number jumps to another value non smoothly, it clearly indicates non-real user behaviour for him. -- Andrey A. Chernov http://ache.pp.ru/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message