full-disclosure - Re: AFS - The Ultimate Sulution? -- What is the point?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-Id: <D7305D1A-9D37-45AC-AD74-EFC60A54F9F7@ece.cmu.edu>
Date: Sun, 17 Sep 2006 11:27:44 -0400
From: "Brandon S. Allbery KF8NH" <allbery@....cmu.edu>
To: full-disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: AFS - The Ultimate Sulution? -- What is the
	point?


On Sep 17, 2006, at 11:05 , Brian Eaton wrote:

>> As you said this requires that the AFS-Server is being kept up to  
>> date.
>> But the Images wouldn't have to be. Apart from this AFS hasn't had a
>> major security-issue in the past several years.
>
> This is odd.  MIT kerberos releases security patches a few times a
> year, doesn't AFS need those patches?

Yes and no --- the last patchset, for example, was to the r-commands  
and telnet, IIRC.  The correct answer to those is "just say no".

-- 
brandon s. allbery    [linux,solaris,freebsd,perl]     allbery@...nh.com
system administrator [openafs,heimdal,too many hats] allbery@....cmu.edu
electrical and computer engineering, carnegie mellon university    KF8NH



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/