From owner-freebsd-hackers Wed Aug 22 16:55:24 2001 Delivered-To: freebsd-hackers@freebsd.org Received: from ussenterprise.ufp.org (ussenterprise.ufp.org [208.185.30.210]) by hub.freebsd.org (Postfix) with ESMTP id 61BC137B40F for ; Wed, 22 Aug 2001 16:55:09 -0700 (PDT) (envelope-from bicknell@ussenterprise.ufp.org) Received: (from bicknell@localhost) by ussenterprise.ufp.org (8.11.1/8.11.1) id f7MNt8594941 for freebsd-hackers@FreeBSD.ORG; Wed, 22 Aug 2001 19:55:08 -0400 (EDT) (envelope-from bicknell) Date: Wed, 22 Aug 2001 19:55:08 -0400 From: Leo Bicknell To: freebsd-hackers@FreeBSD.ORG Subject: Re: ssh password cracker - now this *is* cool! Message-ID: <20010822195508.B93930@ussenterprise.ufp.org> Mail-Followup-To: Leo Bicknell , freebsd-hackers@FreeBSD.ORG References: <200108222330.f7MNUUj80882@earth.backplane.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <200108222330.f7MNUUj80882@earth.backplane.com>; from dillon@earth.backplane.com on Wed, Aug 22, 2001 at 04:30:30PM -0700 Organization: United Federation of Planets Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Wed, Aug 22, 2001 at 04:30:30PM -0700, Matt Dillon wrote: > http://www.vnunet.com/News/1124839 Several people on other mailing lists have pointed out that Nagle should make this much harder, although it's unclear how Nagle and ssh interact. So far that has resulted in a number of degenerating discussions of how things work. Of course, Nagle will not help between two machines on the same ethernet segment, but probably would make the process described in the paper much harder. All of this aruges for Kerberos or some other cryptographic system so once you're authenticated once there is little or no need to type additional passwords. -- Leo Bicknell - bicknell@ufp.org Systems Engineer - Internetworking Engineer - CCIE 3440 Read TMBG List - tmbg-list-request@tmbg.org, www.tmbg.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message