Date: Sat, 25 Aug 2001 22:54:29 +0200 From: Harold Gutch <logix@foobar.franken.de> To: Poul-Henning Kamp <phk@critter.freebsd.dk> Cc: Matt Dillon <dillon@earth.backplane.com>, Alfred Perlstein <bright@mu.org>, freebsd-hackers@FreeBSD.ORG Subject: Re: ssh password cracker - now this *is* cool! Message-ID: <20010825225429.A45162@foobar.franken.de> In-Reply-To: <38519.998772493@critter>; from phk@critter.freebsd.dk on Sat, Aug 25, 2001 at 10:48:13PM %2B0200 References: <20010825223907.A44732@foobar.franken.de> <38519.998772493@critter>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Aug 25, 2001 at 10:48:13PM +0200, Poul-Henning Kamp wrote: > In message <20010825223907.A44732@foobar.franken.de>, Harold Gutch writes: > >On Wed, Aug 22, 2001 at 04:47:15PM -0700, Matt Dillon wrote: > >> :* Matt Dillon <dillon@earth.backplane.com> [010822 18:30] wrote: > >> :> This gets an 'A' on my cool-o-meter. > >> :> > >> :> http://www.vnunet.com/News/1124839 > >> : > >> :Interesting, I guess one could work around it by periodically > >> :sending bogus empty packets in the middle of activity. > >> > >> Yah, and typing backspaces also ought to work. 12345bb45bb45678b8<return> > > > > > >Dug Song and Solar Designer held a talk on this topic at HAL 2001, > >where they stated that backspaces could be detected, as a > >backspace actually translated to <Cursorleft><Space><Cursorleft> > >thus sending 3 characters at a time instead of only 1. > > That's pretty BS because passwords are not echoed... Hm, right. I guess they were only referring to backspaces for things other than passwords, like when typing a command in a shell. bye, Harold To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010825225429.A45162>