Re: ssh, /dev/urandom

[tb@becket.net (Thomas Bushnell, BSG)]

neal@cs.uml.edu (Neal H. Walfield) writes:

> > > Why do I feel like repeating this old mantra: Bad security is worse
> > > than no security.
> > 
> > Sez you.  Many disagree.  Especially for a system in development, with
> > already has bad security.
> 
> I think that we can all accept that there are currently a variety of
> security holes in the Hurd.  The type of security holes which would be
> introduced by using bad random data, however, is far worse as it has
> the potential to allow an attacker to obtain access to systems that
> are ssh'ed to from the Hurd.

Really?  So you think that using telnet to get to those systems will
be more secure?