Rootshell and SSH

path writes "There is some more information on the attack to Rootshell givin out by the SSH people." Apparently they theory now is that the intruders got in through 'legitimate authentication'.