Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 18 Mar 2005 13:09:34 +0100
From:      =?ISO-8859-1?Q?Stian_=D8vrev=E5ge?= <sovrevage@gmail.com>
To:        Dick Hoogendijk <dick@nagual.st>, freebsd-questions@freebsd.org
Subject:   Re: ssh security
Message-ID:  <bf68260705031804093770699f@mail.gmail.com>
In-Reply-To: <423ABD5F.5010007@noconname.org>
References:  <20050318112317.GA35516@lothlorien.nagual.st> <423ABD5F.5010007@noconname.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Another problem is the Man-in-the-Middle problem, where you are led to
believe that you are communicating with your home-computer, but your
session is relayed on through a decrypting/encrypting gateway which is
under someone else's controll.

To counteract this, you should obtain your home-computer's SSH
fingerprint, and verify that this is in fact the machine you are
connecting to when launching putty at school.

Regards, Stian


On Fri, 18 Mar 2005 12:37:03 +0100, Jos=E9 Nicol=E1s Castellano
<jncastellano@noconname.org> wrote:
> Dick Hoogendijk wrote:
>=20
> >I log in from a remote windows computer on my school using PuTTY w/
> >ssh2. What I'd like to know is how *safe* is the login from this windows
> >machine? I mean, can my login to my FreeBSD server at home be
> >*monitored* by someone while I'm using this windows machine at work?
> >Can the keystrokes that I use *in* PuTTY be seen by anybody on this
> >windows network at work. If so, what can I do about it to be more safe?
> >
> >I would like to be able to login to my home computer without being
> >worried about some sneaky system operator at work (school) ;-)
> >
> >
> Mmm. Ssh only can *certificate* you that no one is capturing trafic
> between server and client (freebsd and putty), ssh stablishes a ciphred
> tunnel consistent in a two keys (private and public).
>=20
> Ssh client ( or putty in your case ) don't *warranty* if your computer
> client is running a keylogger or a trojan horse. If client is keylogged
> or trojaned you are died :-D, buy an antivirus or  something for M$
> Platforms. In *nix systems, relay to the administrator...
>=20
> --
> Jose Nicolas Castellano
> Presidente - Asociaci=F3n No cON Name
> Tel:     +34 616 727 675
> E-Mail  : jncastellano@noconname.org
> WWW: www.noconname.org
>=20
>=20
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.o=
rg"
>=20
>=20
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bf68260705031804093770699f>