Re: [SLUG] Re: Preventing attacks

[O Plameras]

Matthew Palmer wrote:
But that's not Kerberos doing that, it's whatever application has been taken
to with a bandsaw to make it do the Kerberos Dance.
 

The point here is having a connection ( established through kerberised 
telnet), and once
that connection is established, the messages exchanged between the two 
computers are
encrypted.

You can prove this to yourself by running tcpdump or ethereal between 
two Linux
boxes connected with ordinary telnet.

Then run tcpdump or ethereal between two Linux boxes connected via 
kerberised
telnet. Then discover for yourself that you won't have a clue what looks the
messages are exchanged between these two computers.

Please feel free to use your sexy Kerberized telnet service to connect to
your server next time I'm nearby with dsniff.
-
I do now believe you do not know what Kerberos is, what it does, what it 
can do,
and why people love it.

--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html