Stajano's ssh & Man-in-Middle attacks

2002-02-28 Thread fred (Please remove 1st F from my email)
Hi, I'm using the procedure of http://www.uk.research.att.com/vnc/sshwin.html When initiating the ssh connection, Stajano suggests against blindly accepting the public key fingerprint presented by the host computer at the far end. He says that you should first physically go to the computer at th

Re: Stajano's ssh & Man-in-Middle attacks

2002-02-28 Thread fred (Please remove 1st F from my email)
imply because you're typing your various other passwords for the world to see. If not, then the risk would be determined the confidential nature of the work being done the over VNC connection. Fred "fred (Please remove 1st F from my email)" wrote: > Hi, > > I'm using

Re: Stajano's ssh & Man-in-Middle attacks

2002-02-28 Thread Fred (Please remove 1st f from my email)
-- Fred Ma Department of Electronics Carleton University, Mackenzie Building 1125 Colonel By Drive Ottawa, Ontario Canada K1S 5B6 [EMAIL PROTECTED] (Remove the 1st "f"!) ====== "fred (Please remove 1st F from my email)&

Re: Fonts Problems

2002-02-28 Thread Fred (Please remove 1st f from my email)
Dave, If the server is running on unix, the vncserver script has a section that allows you to set font paths. You have to uncomment those statements (this described in the unix build instructions). You also have to make sure that the default paths contained in the script actually exist on your

Re: Stajano's ssh & Man-in-Middle attacks

2002-02-28 Thread Fred (Please remove 1st f from my email)
OK, thanks for the info. I guess since I've publicly mentioned possible intentions to use telnet, all the more reason to not do so now. Security for work done off the machines at school is probably not as great as for a company, but I was more trying to avoid random malicious destuctive intent.