OpenSSH 3.5 Released
Dan writes "Markus Friedl announces that OpenSSH 3.5 has just been released with notable updates since 3.4. It will be available from the mirrors listed at http://www.openssh.com/ shortly. Enhancements include bug fixes, improved support for Privilege Separation (Portability, Kerberos, PermitRootLogin handling), RSA blinding in order to avoid timing attacks against the RSA host key and much more. Congratulations are in order for the OpenSSH team's hard work and efforts."
...but not as much motivation when the unreleased version is not installed on many machines.
Move along, no sig to see here.
Because hax0red the FTP server and replaced the good binaries on the FTP server with hax0red binaries. The MD5s (which youcan verify from several places) are of the good binaries. So, the simple answer is don't trust the MD5 from the FTP server.
NT admins have had this philosophy for years, although most people trust Microsoft less and with good reason.
"The secret of success is to know something nobody else knows." -Aristotle Onassis
Theo? Fun?