Re: [osol-discuss] [Fwd: Funding OpenSSH]

2006-03-28 Thread Roland Mainz
James Carlson wrote: Roland Mainz writes: Beyond that point this issue it does not only affect Sun, it also affects OpenSolaris and the related distributions which makes it a valid email for this list. It's perhaps worth noting that the ssh in Solaris is deliberately SunSSH. Though it

Re: [osol-discuss] [Fwd: Funding OpenSSH]

2006-03-28 Thread Roland Mainz
Alan Coopersmith wrote: Felix Schulte wrote: Yes. And Sun SSH is still vulnerable to X11keyboard sniffing. open ssh has untrusted X11 forwarding for that - Sun SSH does not. And how many people use it? No clue. But it makes sense in some environments. And it's not openssh.org's or

Re: [osol-discuss] [Fwd: Funding OpenSSH]

2006-03-27 Thread James Carlson
Roland Mainz writes: Beyond that point this issue it does not only affect Sun, it also affects OpenSolaris and the related distributions which makes it a valid email for this list. It's perhaps worth noting that the ssh in Solaris is deliberately SunSSH. Though it is a derivative of OpenSSH,

Re: [osol-discuss] [Fwd: Funding OpenSSH]

2006-03-27 Thread Dennis Clarke
On 3/27/06, James Carlson [EMAIL PROTECTED] wrote: Roland Mainz writes: Beyond that point this issue it does not only affect Sun, it also affects OpenSolaris and the related distributions which makes it a valid email for this list. It's perhaps worth noting that the ssh in Solaris is

Re: [osol-discuss] [Fwd: Funding OpenSSH]

2006-03-27 Thread Darren J Moffat
Dennis Clarke wrote: There .. see that ? The remote rev is Sun_SSH_1.1 and not OpenSSH. If I drop the cipher length to aes128-cbc then I see this : $ ssh -2 -4 -e\^ -l dclarke -c aes128-cbc -v 192.168.35.123 That is because this was designed (aka HACKED ON) for the Solaris binary product.

Re: [osol-discuss] [Fwd: Funding OpenSSH]

2006-03-23 Thread David J. Orman
Hello, Please understand that this is a mailing list. http://www.opensolaris.org/jive/thread.jspa?threadID=7083tstart=0 While your request is much more well thought out than the previous one today, I suggest you send your requests for donation to the appropriate entities. I don't believe a