Date: Tue, 29 Feb 2000 08:16:20 +0200 From: Mark Murray <mark@grondar.za> To: "Daniel O'Connor" <doconnor@gsoft.com.au> Cc: Mark Murray <mark@grondar.za>, cvs-all@FreeBSD.org, cvs-committers@FreeBSD.org, Mark Murray <markm@FreeBSD.org>, Robert Watson <robert+freebsd@cyrus.watson.org> Subject: Re: cvs commit: src/crypto/openssh auth-krb5.c auth-krb4.c auth- Message-ID: <200002290616.IAA29118@grimreaper.grondar.za> In-Reply-To: <XFMail.000229104324.doconnor@gsoft.com.au> ; from "Daniel O'Connor" <doconnor@gsoft.com.au> "Tue, 29 Feb 2000 10:43:24 %2B1030." References: <XFMail.000229104324.doconnor@gsoft.com.au>
next in thread | previous in thread | raw e-mail | index | archive | help
> > On 28-Feb-00 Mark Murray wrote: > > At the moment, X11 forwarding is ON. I saw a convincing argument > > on bugtraq today for turning it off. > > Care to share? I don't subscribe and I can't find an up to date archive :( > (securityfocus is lagged a few days ): If you have forwarding on, you run xauth on the other side. It's eas{y|ier} to compromise that, and attack X with tunnelling. (In a nutshell). M -- Mark Murray Join the anti-SPAM movement: http://www.cauce.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200002290616.IAA29118>