From owner-cvs-all  Thu Sep 24 13:34:59 1998
Return-Path: <owner-cvs-all>
Received: (from daemon@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id NAA07335
          for cvs-all-outgoing; Thu, 24 Sep 1998 13:34:59 -0700 (PDT)
          (envelope-from owner-cvs-all)
Received: from ns.mt.sri.com (sri-gw.MT.net [206.127.105.141])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA07319
          for <committers@FreeBSD.ORG>; Thu, 24 Sep 1998 13:34:56 -0700 (PDT)
          (envelope-from nate@mt.sri.com)
Received: from mt.sri.com (rocky.mt.sri.com [206.127.76.100])
	by ns.mt.sri.com (8.8.8/8.8.8) with SMTP id OAA26233;
	Thu, 24 Sep 1998 14:34:18 -0600 (MDT)
	(envelope-from nate@rocky.mt.sri.com)
Received: by mt.sri.com (SMI-8.6/SMI-SVR4)
	id OAA01374; Thu, 24 Sep 1998 14:34:16 -0600
Date: Thu, 24 Sep 1998 14:34:16 -0600
Message-Id: <199809242034.OAA01374@mt.sri.com>
From: Nate Williams <nate@mt.sri.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
To: Matthew Dillon <dillon@backplane.com>
Cc: Mike Smith <mike@smith.net.au>, Peter Wemm <peter@netplex.com.au>,
        Nate Williams <nate@mt.sri.com>,
        Jonathan Lemon <jlemon@americantv.com>, Mark Murray <mark@grondar.za>,
        committers@FreeBSD.ORG
Subject: Re: Security and other facilities at WC CDROM - the plan. 
In-Reply-To: <199809242028.NAA21668@apollo.backplane.com>
References: <199809242008.NAA00446@dingo.cdrom.com>
	<199809242028.NAA21668@apollo.backplane.com>
X-Mailer: VM 6.34 under 19.16 "Lille" XEmacs Lucid
Sender: owner-cvs-all@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

> :> know when you're going to need to log in from a machine or network you 
> :> don't trust.  (eg: terminal rooms where people have been tinkering with 
> :> the machines for days and you don't know if you can trust the ssh on them).
> :
> :This is why you *always* take your laptop with you, and where the 
> :much-vilified Libretto is an ideal solution.
> :
>     Nahhh, this is where you take your all-in-one floppy-boot-kernel-ssh 
>     system.  Works even better then security cards(!) heh heh heh.

Actually, this isn't a bad idea.  You just need an easy way to configure
the IP address, and you're up and running. :)

(The only place this falls down is if the IP connection is a dial-up
connection on the very computer you want to have a secure connection
on.  This only happens when I'm at relatives house on vacation.)



Nate

ps. Do you have such a floppy?