Constantin Gavrilescu wrote:

> OK... "Ora de lb. romana" :)
> "cele mai reprezentative" - Ar trebui "mai reprezentative?"

Din cate stiu eu, reprezentativ nu are grad de comparatie. Corect ar fi
"reprezentative" si atat.

>> 2. "Bruce Shneier a scris un articol care demoleaza arhitectura de
>> securitate a PPTP-ului". Se pare ca a demolat doar implementarea de pe
>> Windows, nu protocolul ca atare.
>>   
> Din cata istorie stiu eu, implementarea din Windows 9x a fost
> imbunatatita cu MSCHAPv2, care face mai grele atacurile "dictionar"
> offline, plus inca cateva goodies:
> Uite si un articol din "VPN Illustrated"
> http://www.informit.com/articles/article.asp?p=430835&seqNum=2&rl=1
> Si din faq-ul lui Schneier:
> http://www.schneier.com/pptp-faq.html
> Microsoft PPTP is very broken, and there's no real way to fix it without
> taking the whole thing down and starting over. This isn't just one
> problem, but six different problems, any one of which breaks the protocol.
Tot acolo am citit si eu: "They did not find flaws in PPTP, only in
Microsoft's implementation of it."

> http://poptop.sourceforge.net/dox/protocol-security.phtml
> PPTP is known to be a faulty protocol. The designers of the protocol,
> Microsoft, recommend not to use it due to the inherent risks. Lots of
> people use PPTP anyway due to ease of use, but that doesn't mean it is
> any less hazardous. The maintainers of PPTP Client and Poptop recommend
> using OpenVPN (SSL based) or IPSec instead.
> **
> Ce parere ai acum?
:)

>> 3. Cat de actuala e informatia? Nu apare nimic despre WPA/WPA2 care e un
>> protocol mai nou (si probabil mai sigur):
>> http://en.wikipedia.org/wiki/Wi-Fi_Protected_Access
>>   
> 
> Am pomenit de 802.11i, dar nu am intrat in subiect, pentru ca nu am pus
> mana pe asa ceva. Tot ce am e linux. Daca cineva imi da pe mana
> hardware, sunt interesat sa invat/testez si WPA/2 cu Linux/Freeradius,
> iar apoi sa documentez pasii necesari.
Vezi http://openwrt.org/ Este o distributie de linux pt rutere wireless care
are si suport pt WPA.

-- 
Daniel Toma


_______________________________________________
RLUG mailing list
[email protected]
http://lists.lug.ro/mailman/listinfo/rlug

Raspunde prin e-mail lui