[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ssh, /dev/urandom



> > Why do I feel like repeating this old mantra: Bad security is worse
> > than no security.
> 
> Sez you.  Many disagree.  Especially for a system in development, with
> already has bad security.

I think that we can all accept that there are currently a variety of
security holes in the Hurd.  The type of security holes which would be
introduced by using bad random data, however, is far worse as it has
the potential to allow an attacker to obtain access to systems that
are ssh'ed to from the Hurd.



Reply to: