OpenSSH Gets Even More Suspicious

If you remotely administer any computers, or need to check your email over an untrusted network, odds are you're already familiar with the wonders of OpenSSH. Markus Friedl yesterday posted a release announcement for the newest version, OpenSSH 3.3. Privilege separation in OpenSSH is now enabled by default, another sign of the entire OpenBSD project's appropriate paranoia.

Comments

Slashdot to English

[ReluctantBadger]

1st Official Slashdot to English Translator-matic

• "There's a sourceforge project creating just what you're looking for..."
  "Me and a bunch of people got drunk, thought we could code, submitted the idea and produced a fancy web page. It's now two years later and the project has no files to download and is STILL on Stage 1, Planning."
  
  
• "That's the beauty of UNIX - Lots of little tools which can be used together. Far more flexible!"
  "I've been reading UNIX in a Nutshell for SVR4 and fuck knows what any of this flags stuff is about"
  
  
• "Linux is far more secure than Windows. My box has never been hacked."
  "I can install Red Hat from a bootable CD. The machine is not connected to a network and all I do all day is type ps, pwd and ls. I'm so l33t."
  
  
• "You might want to try going to college and learning about this stuff!"
  "My folks are rich enough to send me off for further education. I am now in an uber-elite crowd of know-it-alls and I am here to belittle you. Fear me."
  
  
• "Microsoft products are soooo insecure!"
  "I've spent the last two years being subjected to biased slashdot propaganda. I couldn't hack into a properly configured windows system if my life depended on it."
  
  
• "We should file an antitrust lawsuit against Sony"
  "I've spent far too much time absorbing bullshit ideals from anarchists. The truth of the matter is, I just don't want to pay for anything whatsoever. Britney CDs should be free because I think that somehow the constitution protects my illegal copying and distribution under some freedom of speech law or fair use act. Even though I don't have to go out and buy luxury items, I'm gonna whinge and bitch anyway"
  
  
• "Have you considered using Linux?"
  "I've only been using it for a week, and now my hardcore wannabe techno friends think I'm a guru. I now recommend it to everybody based upon what I've read at slashdot."
  
  
• "Don't you find that parsing this bitset through the compliation alogirithm that is piped out through GCC on a command line echo really works well for logarithmically sound sine wave matcher?"
  "Somebody please shoot me several times in the head. I am fucking clueless."
  
  
• "If they join all the state drivers licence databases together, they'll be able to track me! How do I change my identity?"
  "I'm too fucking dense to realise that this has been going on for over 15 years already, and I've just finished reading 1984. Go figure."
  
  
  

oxymoronic

[Smelly Jeffrey]

Open Secure Shell? Is that like Passive Agression?

Re:About time

[RebelTycoon]

Very good... You can cut and paste.

+1 for using left hand to press [Ctrl-C/V]

+1 for using right hand to move mouse

-3 for redundancy and trying to act clever.

Re:More suspicious of OpenSSH?

[neuroticia]

I read that too and my mind quickly said to me "Oh great, time to turn off SSH and only allow shell access to people who physically sit down at the computer.

Then I realized that it's "suspicious" as in "the suspicious wife accused her husband of sneaking another computer into the house" and not "the actions of the husband were suspicious, leading his wife to accuse him of sneaking another computer into the house."

Should have said "Open SSH has just become even more paranoid."

THIS is why computers don't speak English. =]

-Sara

Timothy

[jhines]

It is Timothy that we don't trust.

Re:Even OpenBSD developers can be vain...

[Anonymous Coward]

If they KNOW about it, and I'm sure they do, then they'll patch it. They're not Microsoft, afterall.

You're either very lonely or dumb or both. Bet you fancy yourself neither.

Re:DON'T LISTEN! TROJAN ADVICE!

[styrotech]

Blowfish is inherently insecure, ANY FILE LARGER THAN 1024KB YOU TRANSFER CAN BE DECRYPTED BY ANY 13 YEAR OLD WITH A POCKET CALCULATOR!

Hmmm... I tried that out, but it didn't work for me. I'm pretty sure the calculator is okay, do you think my 13 year old is faulty?