[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Darn skiddies (ssh login attempts)



also sprach Chris Adams <cadams@salk.edu> [2005.04.01.2143 +0200]:
> you somewhat from casual attacks against weak passwords: if
> I obtain a copy of a user's password a public-key-only policy
> means that I still need some sort of privileged access to their
> home directory to exploit it - far from impossible but
> significantly more work for the kiddies.

... and you need a passphrase to decode the key -- or at least you
*should* need one.

-- 
Please do not send copies of list mail to me; I read the list!
 
 .''`.     martin f. krafft <madduck@debian.org>
: :'  :    proud Debian developer, admin, user, and author
`. `'`
  `-  Debian - when you have better things to do than fixing a system
 
Invalid/expired PGP subkeys? Use subkeys.pgp.net as keyserver!
 
#define emacs eighty megabytes and constantly swapping.

Attachment: signature.asc
Description: Digital signature


Reply to: