[MLUG] Debian SSH root access keys

[Mike Miller <EMAIL:PROTECTED>]

No time to get the details but here's the basic idea...

We had a message telling us that our Ubuntu box is probably vulnerable to 
a Debian vulnerability where there are only a few SSH keys for root and 
there is now a script that tests all of them in about an hour.  I guess 
there is some kind of bizarre error in the key generation process on some 
systems that causes them to make only a few possible keys.

http://community.livejournal.com/evan_tech/250810.html

I personally never let people log in as root.  Sometimes people say that 
is too restrictive, but today I feel vindicated.

Mike

_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members