From owner-freebsd-hackers  Sat Aug 25 13:54:46 2001
Delivered-To: freebsd-hackers@freebsd.org
Received: from foobar.franken.de (foobar.franken.de [194.94.249.81])
	by hub.freebsd.org (Postfix) with ESMTP id 1F4AB37B408
	for <freebsd-hackers@FreeBSD.ORG>; Sat, 25 Aug 2001 13:54:43 -0700 (PDT)
	(envelope-from logix@foobar.franken.de)
Received: (from logix@localhost)
	by foobar.franken.de (8.11.3/8.11.1) id f7PKsUa45238;
	Sat, 25 Aug 2001 22:54:30 +0200 (CEST)
	(envelope-from logix)
Date: Sat, 25 Aug 2001 22:54:29 +0200
From: Harold Gutch <logix@foobar.franken.de>
To: Poul-Henning Kamp <phk@critter.freebsd.dk>
Cc: Matt Dillon <dillon@earth.backplane.com>,
	Alfred Perlstein <bright@mu.org>, freebsd-hackers@FreeBSD.ORG
Subject: Re: ssh password cracker - now this *is* cool!
Message-ID: <20010825225429.A45162@foobar.franken.de>
References: <20010825223907.A44732@foobar.franken.de> <38519.998772493@critter>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <38519.998772493@critter>; from phk@critter.freebsd.dk on Sat, Aug 25, 2001 at 10:48:13PM +0200
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-hackers.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-hackers>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-hackers>
X-Loop: FreeBSD.ORG

On Sat, Aug 25, 2001 at 10:48:13PM +0200, Poul-Henning Kamp wrote:
> In message <20010825223907.A44732@foobar.franken.de>, Harold Gutch writes:
> >On Wed, Aug 22, 2001 at 04:47:15PM -0700, Matt Dillon wrote:
> >> :* Matt Dillon <dillon@earth.backplane.com> [010822 18:30] wrote:
> >> :>     This gets an 'A' on my cool-o-meter.
> >> :> 
> >> :> 	http://www.vnunet.com/News/1124839
> >> :
> >> :Interesting, I guess one could work around it by periodically
> >> :sending bogus empty packets in the middle of activity.
> >> 
> >>     Yah, and typing backspaces also ought to work.  12345bb45bb45678b8<return>
> >
> >
> >Dug Song and Solar Designer held a talk on this topic at HAL 2001,
> >where they stated that backspaces could be detected, as a
> >backspace actually translated to <Cursorleft><Space><Cursorleft>
> >thus sending 3 characters at a time instead of only 1.
> 
> That's pretty BS because passwords are not echoed...


Hm, right.  I guess they were only referring to backspaces for
things other than passwords, like when typing a command in a
shell.


bye,
  Harold

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message