full-disclosure - Re: SSHD - PasswordAuthentication no/yes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Wed Mar 29 14:09:08 2006
From: gluttony at gmail.com (Andrew A)
Subject: Re: SSHD - PasswordAuthentication no/yes

MITM is a big problem if your users don't have a functional understanding of
key fingerprint difference warnings and use clients like PuTTY that allow
you to accept a changed key with a single click.


On 3/28/06, winsoc <winsoc@...glemail.com> wrote:
>
> Hello List,
>
> not sure if this is a bit too off-topic. But I wanted to ask if there are
> any Security problems when PasswordAuthentication gets changed from no to
> yes on OpenSSH4.1
>
> Regards.
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20060329/a8db96b7/attachment.html