Geek Pit

There is an article up at InformIT by John Tränkenschuh
titled
href=”http://www.informit.com/articles/printerfriendly.asp?p=471099&rl=1″>SSH
Issues: Does Installing SSH Enable More Exploits Than it
Solves?. The basic premise of the article is that SSH usage is
enabling security holes, in most cases quietly, that otherwise would
not have been present. The specific example given is that of SSH agent
forwarding, and how compromise of the […]

Read Full Post »

Note: Updated (twice) below

Here is a quick way to drastically improve the security of your
OpenSSH server
installations. Apart from past flaws in the OpenSSH daemon itself that
have allowed remote compromise (very rare), most break-ins result from
successful brute-force attacks. You can see them in your firewall,
system or auth logs, they are an extremely common form of attack. […]

Read Full Post »