tech-security: Re: sshd Change: PermitRootLogin = no

Subject: Re: sshd Change: PermitRootLogin = no
To: NetBSD Security Technical Discussion List <tech-security@netbsd.org>
From: Greg A. Woods <woods@weird.com>
List: tech-security
Date: 09/06/2001 20:03:22

[ On Thursday, September 6, 2001 at 18:44:45 (-0400), Steven M. Bellovin wrote: ]
> Subject: Re: sshd Change: PermitRootLogin = no 
>
> No -- the absence of echo packets is a pretty good indicator of a 
> password being typed.  (We distinguish that from a vi or emacs session 
> by its length...)

Ah ha!  Of course!  Oh well, one deterrent down the drain.....

-- 
							Greg A. Woods

+1 416 218-0098      VE3TCP      <gwoods@acm.org>     <woods@robohack.ca>
Planix, Inc. <woods@planix.com>;   Secrets of the Weird <woods@weird.com>