Fermilab Call for Codebreakers

2008-05-23 Thread Jim Windle
http://www.symmetrymagazine.org/breaking/2008/05/15/code-crackers-wanted/ Though it now looks like they are well on their way to solving it, Fermilab requested help decoding a coded letter they received. - The Cryptography

Re: blacklisting the bad ssh keys?

2008-05-23 Thread Abe Singer
Ahh the irony, apparently Debian has implement just such a feature, but as patch to ssh within their distro: http://www.mail-archive.com/[EMAIL PROTECTED]/msg214853.html On Thu, May 22, 2008 at 11:19:05AM -0700, Abe Singer wrote: On Wed, May 14, 2008 at 07:52:58PM -0400, Steven M.

Re: [ROS] The perils of security tools

2008-05-23 Thread Florian Weimer
* Peter Gutmann: Debian seem to be particularly bad for not reporting changes to maintainers, This shouldn't be the case. There's a clear policy that non-packaging changes (basically, anything beyond trivial build fixes and pathname changes for FHS compliance) should be submitted upstream.

Re: [ROS] The perils of security tools

2008-05-23 Thread Ben Laurie
Florian Weimer wrote: * Ben Laurie: I must confess that I said that because I did not have the energy to figure out the other routes to adding entropy, such as adding an int (e.g. a PID, which I'm told still makes it in there). The PID dependency is there because of the need for fork

Re: [ROS] The perils of security tools

2008-05-23 Thread Florian Weimer
* Ben Laurie: Jonathan S. Shapiro wrote: Ben: I'm idly curious. Was this exceptionally unusual case where use of uninitialized memory was valid properly commented in the code? It's mentioned in the manpage for a function that eventually calls the function that was (correctly) patched--through

Re: [ROS] The perils of security tools

2008-05-23 Thread Florian Weimer
* Ben Laurie: I must confess that I said that because I did not have the energy to figure out the other routes to adding entropy, such as adding an int (e.g. a PID, which I'm told still makes it in there). The PID dependency is there because of the need for fork support--obviously, the PRNG