Jason Stone <freebsd-secur...@dfmm.org> writes: > Right, but that's not the problem they're trying to solve. They're > trying to solve the problem of logging in _from_ an untrusted machine, > to a trusted machine.
If the machine you're logging in *from* is untrusted, you're SOL. Even with OPIE or similar mechanisms, somebody might piggyback on your SSH connection. The best you can do is boot from a CD or USB fob you prepared yourself, and even then, there might be a hardware key logger installed on the computer. DES -- Dag-Erling Smørgrav - d...@des.no _______________________________________________ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscr...@freebsd.org"