On Wed, 26 Dec 2001, guy keren wrote:
>
> On Wed, 26 Dec 2001, Shlomi Fish wrote:
>
> > Done. IGLU now has an SSH server on port 29. I managed to ssh from here in
> > the Technion. At least the firewalling is not disturbing too much.
>
> please disable direct root login into the ssh server - that's how the old
> one was configured, for a reason. when someone uses root - they must go in
> via a regular user - it makes it easier to track things.
>
Two things:
1. The upgrade of ssh is complete. The ssh on port 29 is still active.
2. We might wish to enable login as root. The reason for it is that
passwords delivered over ssh are vulnerable to the keystroke timing
sniffing. The reason is that ssh sends each letter one at a time and one
can eventually deduce the password from the time in which each letter
arrived.
Regards,
Shlomi Fish
> thanks,
>
> --
> guy
>
> "For world domination - press 1,
> or dial 0, and please hold, for the creator." -- nob o. dy
>
----------------------------------------------------------------------
Shlomi Fish [EMAIL PROTECTED]
Home Page: http://t2.technion.ac.il/~shlomif/
Home E-mail: [EMAIL PROTECTED]
"Let's suppose you have a table with 2^n cups..."
"Wait a second - is n a natural number?"
----------------------------------------------------------------------------
To unsubscribe, send a message to [EMAIL PROTECTED]
Archives available at http://www.mail-archive.com/[email protected]/