HEADS UP: blacklisting of weak ssh keys

Aggelos Economopoulos aoiko at cc.ece.ntua.gr
Fri May 16 09:50:45 PDT 2008


On Friday 16 May 2008, Matthew Dillon wrote:
[...]
>     I am downloading the key fingerprings debian published and will run it
>     against all the accounts on leaf, pkgbox, and other machines.

This just in: if you were going to use ssh-vulnkey, debian just announced they 
have been told about (and addressed) another shortcoming of the tool:

http://lists.debian.org/debian-security-announce/2008/msg00155.html

Aggelos





More information about the Users mailing list