On Thu, Aug 24, 2006 at 02:48:41PM +0100, Aine Douglas wrote:
>> Upon analysis, it was discovered that someone had traced the client
> machine that they connected from, and hacked it, and retrieved the SSH
> key file to access the server. I don't recall if the client was
> windows / linux.
>> The moral of the story is, if your going to use certificate access,
> you better be sure that it is protected by means other than the
> filesystem. And yes, if they do retrieve it, its possibly only a
> matter of time before they crack the password on it unless you have an
> enforced password policy, as Paul has pointed out, but clearly there
> are extra layers of complexity involved in the attack making it less
> and less feasable through enchanced security.
>
Is that really the moral?
If they can compromise the client then they could install a keystoke
logger of sorts and pick up the ssh password when ssh keys are not being
used.
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
