[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: SSH with potato, not very secure?



On Thu, Mar 01, 2001 at 10:30:35AM -0700, Hubert Chan wrote:
> 
> On the other hand, OpenSSH was created by the OpenBSD people, who are
> famous for secure programming.
>

And also for quick security fixes.  They had a patch for sudo about 5 hours
after the recent bug was discovered.  It took a few days for a fixed .deb 
to make it to security.debian.org.  But maybe that's the difference between
an OS that's usually updated through source patches, and one that usually
uses precompiled binaries.

<jakemsr@clipper.net>

PS OpenSSH DOES go through the peer review/audit process.  And if you want
to disable DSA keys, well you can do that too, just read the manpage. 



Reply to: