From owner-freebsd-ports Thu Aug 27 15:07:20 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id PAA11298 for freebsd-ports-outgoing; Thu, 27 Aug 1998 15:07:20 -0700 (PDT) (envelope-from owner-freebsd-ports@FreeBSD.ORG) Received: from lariat.lariat.org (lariat.lariat.org [206.100.185.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA11252; Thu, 27 Aug 1998 15:07:05 -0700 (PDT) (envelope-from brett@lariat.org) Received: (from brett@localhost) by lariat.lariat.org (8.8.8/8.8.6) id QAA16656; Thu, 27 Aug 1998 16:06:08 -0600 (MDT) Message-Id: <199808272206.QAA16656@lariat.lariat.org> X-Sender: brett@mail.lariat.org X-Mailer: QUALCOMM Windows Eudora Pro Version 4.1.0.49 (Beta) Date: Thu, 27 Aug 1998 16:05:20 -0600 To: insane@oneinsane.net, freebsd-ports@FreeBSD.ORG, freebsd-security@FreeBSD.ORG From: Brett Glass Subject: Re: SSH port In-Reply-To: <19980827092138.B9553@oneinsane.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-ports@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org It may be time for a new rev of SSH anyway. IBM's recently announced method of shutting down known ciphertext "man in the middle" attacks is worth adding to the protocol. --Brett At 09:21 AM 8/27/98 -0700, Ron 'The Insane One' Rosson wrote: >Is there a reason why we dont have a port of the ver 2.x >ssh. There appears to be an insertion attack in the 1.26 >version that we have in our ports. Sorry for the cross >psot but theis came to my attention from running some tests >on my own machines. >TIA >Ron >-- >-------------------------------------------------------- >Ron Rosson ... and a UNIX user said ... >The InSaNe One rm -rf * >insane@oneinsane.net and all was null and void >-------------------------------------------------------- >It's so nice to be insane, nobody asks you to explain. > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message