Re: ssh password cracker - now this *is* cool!

2001-08-25 Thread Valentin Nechayev
Sat, Aug 25, 2001 at 22:39:07, 520066542279-0001 (Harold Gutch) wrote about "Re: ssh password cracker - now this *is* cool!": > Dug Song and Solar Designer held a talk on this topic at HAL 2001, > where they stated that backspaces could be detected, as a > backspace act

Re: ssh password cracker - now this *is* cool!

2001-08-25 Thread James Snow
On Sun, Aug 26, 2001 at 06:32:56AM +0100, Ben Smithurst wrote: > > The issue I believe is passwords you type after logging in (e.g. > changing your password or logging into another machine), not the > password you actually use to log in... I just knew I was going to wind up tasting the sole of m

Re: ssh password cracker - now this *is* cool!

2001-08-25 Thread Ben Smithurst
James Snow wrote: > I'm just looking at packet dumps, not source, but it looks to me like > OpenSSH sends passwords all in one shot, not character by character. The issue I believe is passwords you type after logging in (e.g. changing your password or logging into another machine), not the passw

Re: ssh password cracker - now this *is* cool!

2001-08-25 Thread James Snow
On Sat, Aug 25, 2001 at 10:39:07PM +0200, Harold Gutch wrote: > > :* Matt Dillon <[EMAIL PROTECTED]> [010822 18:30] wrote: > > :> This gets an 'A' on my cool-o-meter. > > :> > > :> http://www.vnunet.com/News/1124839 > > Dug Song and Solar Designer held a talk on this topic at HAL 2001, > wh

Re: ssh password cracker - now this *is* cool!

2001-08-25 Thread Warner Losh
In message <[EMAIL PROTECTED]> Harold Gutch writes: : Dug Song and Solar Designer held a talk on this topic at HAL 2001, : where they stated that backspaces could be detected, as a : backspace actually translated to : thus sending 3 characters at a time instead of only 1. Not if echo was turned

Re: ssh password cracker - now this *is* cool!

2001-08-25 Thread Harold Gutch
On Sat, Aug 25, 2001 at 10:48:13PM +0200, Poul-Henning Kamp wrote: > In message <[EMAIL PROTECTED]>, Harold Gutch writes: > >On Wed, Aug 22, 2001 at 04:47:15PM -0700, Matt Dillon wrote: > >> :* Matt Dillon <[EMAIL PROTECTED]> [010822 18:30] wrote: > >> :> This gets an 'A' on my cool-o-meter. >

Re: ssh password cracker - now this *is* cool!

2001-08-25 Thread Poul-Henning Kamp
In message <[EMAIL PROTECTED]>, Harold Gutch writes: >On Wed, Aug 22, 2001 at 04:47:15PM -0700, Matt Dillon wrote: >> :* Matt Dillon <[EMAIL PROTECTED]> [010822 18:30] wrote: >> :> This gets an 'A' on my cool-o-meter. >> :> >> :> http://www.vnunet.com/News/1124839 >> : >> :Interesting, I gu

Re: ssh password cracker - now this *is* cool!

2001-08-25 Thread Harold Gutch
On Wed, Aug 22, 2001 at 04:47:15PM -0700, Matt Dillon wrote: > :* Matt Dillon <[EMAIL PROTECTED]> [010822 18:30] wrote: > :> This gets an 'A' on my cool-o-meter. > :> > :>http://www.vnunet.com/News/1124839 > : > :Interesting, I guess one could work around it by periodically > :sending bog

Re: ssh password cracker - now this *is* cool!

2001-08-22 Thread Greg Black
Alfred Perlstein wrote: | * Greg Black <[EMAIL PROTECTED]> [010822 19:46] wrote: | > Matt Dillon wrote: | > | This gets an 'A' on my cool-o-meter. | > | | > | http://www.vnunet.com/News/1124839 | > | > The real research might be interesting, but the information in | > the article seems to

Re: ssh password cracker - now this *is* cool!

2001-08-22 Thread Alfred Perlstein
* Leo Bicknell <[EMAIL PROTECTED]> [010822 20:00] wrote: > On Wed, Aug 22, 2001 at 05:10:16PM -0700, Bruce A. Mah wrote: > > > Several people on other mailing lists have pointed out that Nagle > > > should make this much harder, although it's unclear how Nagle and > > > ssh interact. So far that

Re: ssh password cracker - now this *is* cool!

2001-08-22 Thread Leo Bicknell
On Wed, Aug 22, 2001 at 05:10:16PM -0700, Bruce A. Mah wrote: > > Several people on other mailing lists have pointed out that Nagle > > should make this much harder, although it's unclear how Nagle and > > ssh interact. So far that has resulted in a number of degenerating > > discussions of how t

Re: ssh password cracker - now this *is* cool!

2001-08-22 Thread Alfred Perlstein
* Greg Black <[EMAIL PROTECTED]> [010822 19:46] wrote: > Matt Dillon wrote: > > | This gets an 'A' on my cool-o-meter. > | > | http://www.vnunet.com/News/1124839 > > The real research might be interesting, but the information in > the article seems to be wrong. It says: > > Each k

Re: ssh password cracker - now this *is* cool!

2001-08-22 Thread Greg Black
Matt Dillon wrote: | This gets an 'A' on my cool-o-meter. | | http://www.vnunet.com/News/1124839 The real research might be interesting, but the information in the article seems to be wrong. It says: Each keystroke from a user is immediately sent to the target machine as a s

Re: ssh password cracker - now this *is* cool!

2001-08-22 Thread Bruce A. Mah
If memory serves me right, Leo Bicknell wrote: > On Wed, Aug 22, 2001 at 04:30:30PM -0700, Matt Dillon wrote: > > http://www.vnunet.com/News/1124839 > > Several people on other mailing lists have pointed out that Nagle > should make this much harder, although it's unclear how Nagle and > ssh

Re: ssh password cracker - now this *is* cool!

2001-08-22 Thread Leo Bicknell
On Wed, Aug 22, 2001 at 04:30:30PM -0700, Matt Dillon wrote: > http://www.vnunet.com/News/1124839 Several people on other mailing lists have pointed out that Nagle should make this much harder, although it's unclear how Nagle and ssh interact. So far that has resulted in a number of degene

Re: ssh password cracker - now this *is* cool!

2001-08-22 Thread Mark Hittinger
> > Yah, and typing backspaces also ought to work. 12345bb45bb45678b8 > How about some control-Q's? :-) Later Mark Hittinger Earthlink [EMAIL PROTECTED] To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message

Re: ssh password cracker - now this *is* cool!

2001-08-22 Thread Matt Dillon
: :* Matt Dillon <[EMAIL PROTECTED]> [010822 18:30] wrote: :> This gets an 'A' on my cool-o-meter. :> :> http://www.vnunet.com/News/1124839 : :Interesting, I guess one could work around it by periodically :sending bogus empty packets in the middle of activity. : :-- :-Alfred Perlstein

Re: ssh password cracker - now this *is* cool!

2001-08-22 Thread Alfred Perlstein
* Matt Dillon <[EMAIL PROTECTED]> [010822 18:30] wrote: > This gets an 'A' on my cool-o-meter. > > http://www.vnunet.com/News/1124839 Interesting, I guess one could work around it by periodically sending bogus empty packets in the middle of activity. -- -Alfred Perlstein [[EMAIL PROT

ssh password cracker - now this *is* cool!

2001-08-22 Thread Matt Dillon
This gets an 'A' on my cool-o-meter. http://www.vnunet.com/News/1124839 -Matt To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message