Re: updating openssh

2003-01-12 Thread M.W. Chang
that's a 1024-bit kit. it's not supposed to be that easy to hack it, right? I never consider yahoo to be safe. :P email account to be secure I hope. Any wannabe script kiddie will crack that account in less than a minute, grabbing your private key, checking the header for the originating ip

Re: updating openssh

2003-01-12 Thread Net Llama!
THe key length is irrelevant if you're sending your private key over the wire. Nothing needs to be cracked if they get your private key. On Sun, 12 Jan 2003, M.W. Chang wrote: that's a 1024-bit kit. it's not supposed to be that easy to hack it, right? I never consider yahoo to be safe. :P

Re: updating openssh

2003-01-12 Thread m.w.chang
you need a passord to use the private key... hmm...I thought you guys were talking about hacking the password out of the private key. that's dictionary hack, I believe, which may be easier. Net Llama! wrote: THe key length is irrelevant if you're sending your private key over the wire.

Re: updating openssh

2003-01-12 Thread m.w.chang
let me try to publish the public key instead. I forgot whether puttygen.exe could produce the private key from the public key. I need to use the private key to connect to my linux's openssh. I could buy a cheap 64M USB storage to keep my own key. but it would be nice to put it inside my mobile

Re: updating openssh

2003-01-12 Thread m.w.chang
my flaw. no way to generate private key out of the public key. yes, I indeed didn't quite comprehend the maths involved in RSA. still looking for an easy and safe way to access the private key safely from my linux remotely... which sounds like a chicken-and-egg problem with security. m.w.chang

Re: updating openssh

2003-01-08 Thread Net Llama!
I don't think you understand the concept of a private key if you're emailing all over creation. On Wed, 8 Jan 2003, m.w.chang wrote: whenever I change the key, I emailed my yahoo account the new private key. putty can be downloaded from anywhere. Another approach is to the web server. I

Re: updating openssh

2003-01-08 Thread Andrew Mathews
m.w.chang wrote: whenever I change the key, I emailed my yahoo account the new private key. putty can be downloaded from anywhere. Another approach is to the web server. I don't carry any USB storage device. I prefer to get everything from the net, including my private key. :) Jesus Christ!

Re: updating openssh

2003-01-07 Thread m.w.chang
while sshd is active, can one rpm -e openssh and use checkinstall? stayler wrote: Done it a couple times. Just cron a restart of sshd for a few minutes later then kill sshd after the make install, plus editing of sshd_config of course... -- Swiftly. Silently. Invisibly. .~. In Linux We

Re: updating openssh

2003-01-07 Thread m.w.chang
my telnet is set to work on LAN only (not over the internet). just in case but if I cuold use openssh only, I would rpm -e the telnet daemon. the only hussles is the key. I have to figure out a way to let me access my private key anywhere in the internet when I need it. Net Llama! wrote:

Re: updating openssh

2003-01-07 Thread stayler
On Tue, 07 Jan 2003 16:00:26 +0800, m.w.chang wrote: while sshd is active, can one rpm -e openssh and use checkinstall? That I can't say. Since I went over to Slackware, I've been tarballing things. stayler ___ Linux-users mailing list [EMAIL

Re: updating openssh

2003-01-07 Thread Net Llama!
For older versions of openssh. On Tue, 7 Jan 2003, m.w.chang wrote: I barely remembere that the moment you rpm -e sshd, your last openssh session would be killed./ stayler wrote: On Tue, 07 Jan 2003 16:00:26 +0800, m.w.chang wrote: while sshd is active, can one rpm -e openssh and use

Re: updating openssh

2003-01-07 Thread Net Llama!
No. Since when do you upgrade a package by removing it? SUrely you mean rpm -Uvh openssh. On Tue, 7 Jan 2003, m.w.chang wrote: while sshd is active, can one rpm -e openssh and use checkinstall? stayler wrote: Done it a couple times. Just cron a restart of sshd for a few minutes later

Re: updating openssh

2003-01-07 Thread Net Llama!
On Tue, 7 Jan 2003, m.w.chang wrote: my telnet is set to work on LAN only (not over the internet). just in I assume you've set this up so that telnet is only listening on an interface that is internal. case but if I cuold use openssh only, I would rpm -e the telnet daemon. the only

Re: updating openssh

2003-01-07 Thread Bill Campbell
On Tue, Jan 07, 2003 at 04:00:26PM +0800, m.w.chang wrote: while sshd is active, can one rpm -e openssh and use checkinstall? I haven't tried that, but have frequently done an ``rpm -U'' on running systems on ssh without difficulties. I manually killed off the master sshd process, and started a

updating openssh

2003-01-06 Thread m.w.chang
how could one upgrade openssh if openssh is the only remote shell available on a linux server? I always fell back to telnet when I needed to update openssh. -- Swiftly. Silently. Invisibly. .~. In Linux We Trust. news://news.hkpcug.org/ v \ http://www.linux-sxs.org

Re: updating openssh

2003-01-06 Thread Net Llama!
Well, obviously its a bad idea, but why can't you fall back to telnet now? At any rate, i think until you HUP the daemon, it will continue to run while its being upgraded. At least the newer versions do. On 01/06/03 20:12, m.w.chang wrote: how could one upgrade openssh if openssh is the only

Re: updating openssh

2003-01-06 Thread stayler
Done it a couple times. Just cron a restart of sshd for a few minutes later then kill sshd after the make install, plus editing of sshd_config of course... On Tue, 07 Jan 2003 12:12:30 +0800, m.w.chang wrote: how could one upgrade openssh if openssh is the only remote shell available on a

Re: updating openssh

2003-01-06 Thread Keith Morse
On Mon, 6 Jan 2003, Net Llama! wrote: Well, obviously its a bad idea, but why can't you fall back to telnet now? At any rate, i think until you HUP the daemon, it will continue to run while its being upgraded. At least the newer versions do. On 01/06/03 20:12, m.w.chang wrote: how