From owner-freebsd-security  Tue Mar 19 12:21:16 2002
Delivered-To: freebsd-security@freebsd.org
Received: from duluth.camulus.org (c24.158.24.190.dul.mn.charter.com [24.158.24.190])
	by hub.freebsd.org (Postfix) with ESMTP id AA83237B624
	for <security@freebsd.org>; Tue, 19 Mar 2002 12:16:11 -0800 (PST)
Received: from nihilist.local.net (nihilist.local.net [192.168.100.1])
	by duluth.camulus.org (8.11.6/8.11.6) with ESMTP id g2JKFnx21883;
	Tue, 19 Mar 2002 20:15:49 GMT
	(envelope-from alex@camulus.com)
Date: Tue, 19 Mar 2002 20:15:49 +0000 (GMT)
From: "Alex C. Jokela" <alex@camulus.com>
X-X-Sender: alex@duluth.camulus.org
To: Tom Rhodes <darklogik@pittgoth.com>
Cc: Alfred Perlstein <bright@mu.org>,
	Chris Johnson <cjohnson@palomine.net>, <security@freebsd.org>
Subject: Re: Safe SSH logins from public, untrusted Windows computers
In-Reply-To: <3C979D68.5060609@pittgoth.com>
Message-ID: <20020319201312.M58891-100000@duluth.camulus.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


if you're that desperate for a caffiene fix, you should always carry with
you those caffiene mints you can get from thinkgeek.com - pop three of
those into your mouth, WHAM! you have as much caffiene as that of a cup of
coffee.  problem solved.  =)

-aj-

----
  http://www.camulus.org/


On Tue, 19 Mar 2002, Tom Rhodes wrote:

> Alfred Perlstein wrote:
>
> > * Chris Johnson <cjohnson@palomine.net> [020319 11:45] wrote:
> > [snip]
> >
> >>Does anyone have any comments, or does anyone have a better idea?
> >>
> >
> > Once you load the key onto the machine and type your passphrase in you've
> > done as good as just typing your password into it.
> >
> > Don't use untrusted machines or get something like secure-ID that
> > does one-time passwords.  Even with one time passwords you never know
> > if someone with control over the machine is sitting there waiting for
> > you to grab a cup of coffee in order to take control of your session
> > and do nasties. :(
>
>
> don't drink coffee, or logout before getting the coffee, or just bring
> it to the system with you ;)
>
>
> >
> > So I guess it boils down to:
> >   "Don't use untrusted machines."
> >
> >
>
> Thats a good idea though ;)
>
> --
> Tom (Darklogik) Rhodes
> www.Pittgoth.com Gothic Liberation Front
> www.FreeBSD.org  The Power To Serve
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
>
>
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message