Re: Is this normal?

From: Jonathan Loh (kj6loh_at_yahoo.com)
Date: 10/27/04

  • Next message: Rob klein Gunnewiek: "Re: VPN in debian: L2TP/IPSec? PPTP? ...?"
    Date: Tue, 26 Oct 2004 15:17:41 -0700 (PDT)
    To: xyberpix <xyberpix@xyberpix.com>
    
    

    ethercap (ettercap) can do SSH1 too.
    --- xyberpix <xyberpix@xyberpix.com> wrote:

    > SSH doesn't use cleartext, but version one can be sniffed quite easily
    > with dsniff. :-)
    > Maybe that's what was meant?
    >
    > xyberpix
    >
    > On Sat, 23 October, 2004 5:50 am, Jonathan Loh said:
    > > I thought ssh did not send cleartext? Granted you can see source and
    > > destination and the fact that they are using ssh if you sniff when the
    > > session
    > > is starting, but no passwords are sent cleartext. But you'd be able to
    > > see
    > > that anyway. Though I think someone here mentioned in the ssh, not
    > > openssh,
    > > implementation there is a provision to send things in cleartext, though
    > > that
    > > has to be configured.
    > >
    > > Sure you can use hostkeys. hostkeys will verify that you are logging in
    > > from a
    > > certain host. But I also recomend you use passwords.
    > >
    > > --- bp1974@comcast.net wrote:
    > >
    > >> * Disable clear text services (telnet,ssh etc.)
    > >
    > >
    > >
    > >
    > > __________________________________
    > > Do you Yahoo!?
    > > Yahoo! Mail Address AutoComplete - You start. We finish.
    > > http://promotions.yahoo.com/new_mail
    > >
    >
    >
    > --
    > For security and Opensource news check out:
    > http://xyberpix.demon.co.uk
    >
    >

    __________________________________________________
    Do You Yahoo!?
    Tired of spam? Yahoo! Mail has the best spam protection around
    http://mail.yahoo.com


  • Next message: Rob klein Gunnewiek: "Re: VPN in debian: L2TP/IPSec? PPTP? ...?"

    Relevant Pages

    • Re: Is this normal?
      ... SSH doesn't use cleartext, but version one can be sniffed quite easily ... > Sure you can use hostkeys. ... > Do you Yahoo!? ...
      (Security-Basics)
    • Re: Is this normal?
      ... I thought ssh did not send cleartext? ... but no passwords are sent cleartext. ... Sure you can use hostkeys. ... Do you Yahoo!? ...
      (Security-Basics)
    • Re: Advice on dealing with scripted SSH attacks?
      ... I see this sort of attack a lot, ... script hits a tcp wrapped ssh, ... Do You Yahoo!? ... Mail has the best spam protection around ...
      (SSH)
    • Re: Blue screen in Fedora
      ... > screen as of Windows. ... > rolling sand watch that used to give a way to ... > I'd like to know at least how to let ssh go through. ... > Do you Yahoo!? ...
      (Fedora)
    • Re: no sshd log exists
      ... I have the same thing in my sshd_config for logging my ssh ... Do You Yahoo!? ... Mail has the best spam protection around ...
      (SSH)

  • Quantcast