OpenSSH daemon security bug?

Michael Stone mstone at mathom.us
Thu Jan 7 00:07:07 EST 2010


On Wed, Jan 06, 2010 at 11:48:43AM +0000, Jefferson Ogata wrote:
>That is true. But the vast majority of intruders are incompetent.

So are the vast majority of pen-testers. :-) Sturgeon's Revelation. It 
only takes one competent one to spread the word, then you have a major 
outbreak. If incompetence in the bad guys is your defense strategy, 
arguing the finer points of keys vs passwords seems pedantic.

Mike Stone


More information about the openssh-unix-dev mailing list