Re: Patching a SSH 'Weakness'

2008-09-12 Thread Kevin Neff
[EMAIL PROTECTED] wrote: On 9/10/2008 at 2:58 PM Kevin Neff wrote: |Hi, | |Some secure protocols like SSH send encrypted keystrokes |as they're typed. By doing timing analysis you can figure |out which keys the user probably typed (keys that are |physically close together on a keyboard can

Patching a SSH 'Weakness'

2008-09-10 Thread Kevin Neff
Hi, Some secure protocols like SSH send encrypted keystrokes as they're typed. By doing timing analysis you can figure out which keys the user probably typed (keys that are physically close together on a keyboard can be typed faster). A careful analysis can reveal the length of passwords and