[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] SSH brute force blocking tool

To: Tavis Ormandy <taviso@xxxxxxxxxx>
Subject: Re: [Full-disclosure] SSH brute force blocking tool
From: Thierry Zoller <Thierry@xxxxxxxxx>
Date: Tue, 28 Nov 2006 17:14:28 +0100

Dear Tavis,

TO> J, you have made an attempt to fix it, but is is not sufficient.
TO> An attacker can still add arbitrary hosts to the deny list.

Can you propose a fix ? Apart from the aggressivness of this thread
I find it interesting to read (from a tech standpoint).



-- 
http://secdev.zoller.lu
Thierry Zoller
Fingerprint : 5D84 BFDC CD36 A951 2C45  2E57 28B3 75DD 0AC6 F1C7

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Follow-Ups:
- Re: [Full-disclosure] SSH brute force blocking tool
  - From: Tavis Ormandy
- Re: [Full-disclosure] SSH brute force blocking tool
  - From: Brian Eaton
- Re: [Full-disclosure] SSH brute force blocking tool
  - From: Brian Eaton

References:
- [Full-disclosure] SSH brute force blocking tool
  - From: J. Oquendo
- Re: [Full-disclosure] SSH brute force blocking tool
  - From: Tavis Ormandy
- Re: [Full-disclosure] SSH brute force blocking tool
  - From: Thierry Zoller
- Re: [Full-disclosure] SSH brute force blocking tool
  - From: J. Oquendo
- Re: [Full-disclosure] SSH brute force blocking tool
  - From: Tavis Ormandy
- Re: [Full-disclosure] SSH brute force blocking tool
  - From: J. Oquendo
- Re: [Full-disclosure] SSH brute force blocking tool
  - From: Tavis Ormandy

Prev by Date: Re: [Full-disclosure] SSH brute force blocking tool
Next by Date: Re: [Full-disclosure] SSH brute force blocking tool
Previous by thread: Re: [Full-disclosure] SSH brute force blocking tool
Next by thread: Re: [Full-disclosure] SSH brute force blocking tool
Index(es):
- Date
- Thread