Re: AMNESIA:33 and FreeBSD TCP/IP stack involvement

2020-12-17 Thread Hartmann, O.
> Hartmann, O. wrote this message on Wed, Dec 09, 2020 at 06:58 +0100: > > I've got a question about recently discovered serious > > vulnerabilities in certain TCP stack implementations, designated as > > AMNESIA:33 (as far as I could follow the recently made > &

AMNESIA:33 and FreeBSD TCP/IP stack involvement

2020-12-08 Thread Hartmann, O.
Hello, I've got a question about recently discovered serious vulnerabilities in certain TCP stack implementations, designated as AMNESIA:33 (as far as I could follow the recently made announcements and statements, please see, for instance, https://www.zdnet.com/article/amnesia33-vulnerabilities-imp

Re: Default password hash

2012-06-08 Thread Hartmann, O.
On 06/08/12 15:06, Maxim Khitrov wrote: > On Fri, Jun 8, 2012 at 8:51 AM, Dag-Erling Smørgrav wrote: >> We still have MD5 as our default password hash, even though known-hash >> attacks against MD5 are relatively easy these days. We've supported >> SHA256 and SHA512 for many years now, so how abo

Re: PAM modules

2011-09-18 Thread Hartmann, O.
On 09/18/11 20:03, Dag-Erling Smørgrav wrote: > Xin LI writes: >> LDAP? (We do currently have some work on LDAP integration but not >> sure if the community would be interested -- this would need an import >> of stripped down OpenLDAP) and modifies OpenSSH to support public key >> in LDAP directo

Re: PAM modules -> LDAP!

2011-09-17 Thread Hartmann, O.
On 09/16/11 23:36, Mike Carlson wrote: > On 09/16/2011 08:05 AM, Dag-Erling Smørgrav wrote: >> We currently have a number of PAM modules in ports, and while some of >> them are specific to certain third-party software, many aren't. I >> believe we would benefit from importing at least some of thes