Skip to navigation
   
Dan Jones's Blog
Debian OpenSSH vulnerability

By Dan Jones in Reader

Posted in Debian, Linux on May 15, 2008 at 11:53 am

Permalink | Author Profile

Any Debian user please note the recent security advisory, apply immediately, and then look at this link to find what you next need to do:

The vulnerability is in the crypto (openssl) library, causing keys generated on a Debian system to be emminantly predicatable. This site has generated keys, and fingerprints for all keys actually possible to be created using the bug. This means its HIGHLY likely in my opinion that a hackers or a worm may start using this soon. They also say they may be making an auto-exploit tool - The site linked above quotes “In the near future, this site will be updated to include a brute force tool that can be used quickly gain access to any SSH account that allows public key authentication using a vulnerable key”

Basically the problem exists if you allow identity/logins to be asserted via a certificate(authorized_keysfile). Ie, login with no password. You can guess the first port of attack will be on the root@your box - so if you allow remote root logins via certificate on debian, please be careful.

Pretty critical bug, but as always a great response from Debian and the community on this. Other Debian based distruibutions have not been confirmed vulnerable at this time (though may not be found to be if they did not merge the faulty code into their distributions). Update according to another blog : Any SSH or SSL keys generated on all Debian-derived systems corresponding to

12345
Not yet rated
Loading ... Loading ...

 
RyanAir & Use of Mobiles - A rant.

By Dan Jones in Reader

Posted in Travel, Wi-Fi, Mobile Phone on May 13, 2008 at 10:03 am

Permalink | Author Profile

I know, I’m slow in responding to RyanAirs plans to allow people to use Mobiles on planes. However as I had not been on a flight recently on Ryanair I did not want to comment on the airline without having “experienced” their service as it is today. I flew from Stansted to Milan for a business trip, and flew Ryanair ONLY because their flight times allowed me to do a trip in 3 days that would have took 4 on other carriers. I think next time I’ll take the longer option.

On the subject of their use of mobiles - It will make an already annoying experience almost unbearable. I mean their flights already have the most uncomfortable, unreclineable seats possible, and with no seat back storage - resulting in people getting up/down to get things out of overhead baggage rather a lot. Then there is the inane music greeting you as you board (until push back) and upon landing. I feel so sorry for the flight attendants having their ears assaulted by this music every day. The adverts for scratch cards on the PA system also were another in-flight annoyance(which somehow even could be overheard over my Shure noise isolating earphones!). On my outbound flight they also put on the hot blowers until the cabin doors shut, seemingly to dehydrate their passengers in order that water and drink sales could be increased! The arrival of mobile phones would no doubt mean some Ryanair customers (not being able to afford to make a call) would sit on the plane and play ring tones to each other all flight no doubt (this WAS the experience in the departure lounge prior to flight).

Post this trip I’ve already said to work I will only fly Ryanair in the event no other carrier has a direct flight to the airport in question, and where an alternative will add 6+ hours in travel time. If mobiles are introduced on planes, I think I’ll just put up with the extra travel time.

So my message to the leader of Ryanair, is you risk my business (and probably many business travellers) if you continue with this crazy plan to keep annoying your passengers.

On a side note, I do see that JetBlue are intruducing free wifi Broadband on their planes. Now if only a UK low cost carrier (or even scheduled, this WOULD be a differentiator) would introduce similar on their planes. This article has a great writeup on the service. I’d be happy if one of the European providers even had live TV, or AVOD on within-european services (with a decent route network).

Do you want wifi on planes? And TV?

12345
Rated: 20% (2 votes)
Loading ... Loading ...

 
Best Bargain ever

By Dan Jones in Reader

Posted in Hardware on May 9, 2008 at 2:27 pm

Permalink | Author Profile


12345
Not yet rated
Loading ... Loading ...

 
Advertisement
Advertisement