Quoting Brian Behlendorf (briancollab.net):
> On Thu, 31 May 2001, Cy Schubert - ITSD Open Systems Group wrote:
> > Some of you might be interested in this.
>
> If anyone has any questions about this, I'm happy to answer them. It's
> always the stupid things (not finishing the upgrade of openssh to 2.3.0
> when the advisory came out - no points for a "make buildworld" without a
> corresponding "make installworld"!) that catch you.

That should be verified often with scanssh or something similar. I was
surprised when I read about the compromise, because it gives the impression
that people are still using passwords (as opposed to keys with passphrases)
for authentication in this day and age. Is that correct? If so, why is that?

-- 
I prefer the dark of the night, after midnight and before four-thirty,
when it's more bare, more hollow.                  http://a.area51.dk/
To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]