OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 1st quarter (Jan-Mar) 1995: Would an encrypted tunnel solve the SeqNo guessing attack?

Would an encrypted tunnel solve the SeqNo guessing attack?

Bennett Todd (betstd.sbi.com)
Thu, 26 Jan 1995 16:04:24 -0500 (EST) 

I'm not keen on the idea of people grabbing my telnet session away from me
and making free with it. I'm resigned to the notion that they can steal
it; I'd like to make it useless to them once they've got it.

Suppose I took term (a multiplexing, compressing, error-correcting serial
tunnel program) and added encryption, and rigged that to be my login shell.
I'd log in to the computer, and after my S/Key prompt it'd fire up an
encrypted term. I don't see any way some could burgle in through that.

Have I missed something fundamental here? Or would this work?

-Bennett
betsbi.com