HEADS UP: blacklisting of weak ssh keys
Aggelos Economopoulos
aoiko at cc.ece.ntua.gr
Fri May 16 09:50:45 PDT 2008
On Friday 16 May 2008, Matthew Dillon wrote:
[...]
> I am downloading the key fingerprings debian published and will run it
> against all the accounts on leaf, pkgbox, and other machines.
This just in: if you were going to use ssh-vulnkey, debian just announced they
have been told about (and addressed) another shortcoming of the tool:
http://lists.debian.org/debian-security-announce/2008/msg00155.html
Aggelos
More information about the Users
mailing list