On 9/30/05, Ralph Shumaker <[EMAIL PROTECTED]> wrote:
> Stewart Stremler wrote:
>
> >begin  quoting Scott McClelland as of Wed, Sep 28, 2005 at 01:06:08AM > > 
> >>You should answer yes at the prompt.
> >
> >And you should use an empty password, too.
>
> Why?

He's being funny.  He's making a parallel.  You should immediately
recognize "empty password" as generally unsafe, and thus figure out
that he means "answer yes at the prompt" is unsafe.

However, in this narrowly defined context, connecting to a server just
to see what SSH is like, answering yes at the prompt is okay.  *JUST
DON'T SEND INFORMATION YOU DON'T WANT COMPROMISED OVER THAT
CONNECTION*  *Assume* that the connection is compromised.  When (if)
you start to use SSH for real, you'll need to start taking more of an
interest in security.  Please remember this.

-todd


--
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list

Reply via email to