search for: linemod

My Linux kernel patches for linemode support have been pulled into the 2.6.36 release stream, so I figure it's time to finish up the work on openssh, bash, tcsh, readline, libedit, and anything else that comes along. As I last wrote here http://wiki.github.com/hyc/OpenSSH-LINEMODE/ I've got a few open issues remaining......

...ttp://osdir.com/ml/ietf.secsh/2001-09/msg00003.html ) I've finally gotten around to this. The EXTPROC support on Linux is missing, but you can find kernel patches for that here http://lkml.org/lkml/2010/6/11/403 I've also fixed up the netkit telnet / telnetd code to work with EXTPROC / LINEMODE on Linux, those patches are here http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=585527 These ssh patches are still not even half-baked, just a proof of concept to get feedback and guidance on what the right approach actually is. To get an idea of where it's coming from you should read RF...

...ecome more prevalent since distributed networks continue to grow broader but (surprise) the speed of light remains a constant. 2) character-at-a-time protocols have both security and performance costs. 3) a solution for this has existed in common operating systems for a couple of decades already (LINEMODE tty support). It's strange how the secsh group at the IETF refused to learn from the lessons already gained from the years of experience with the telnet protocol. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/...

...to (say) > sudo. This got fixed around the time the paper was released IIRC, > search for "Simulate echo" in channels.c:channel_handle_wfd(). > > The broader issue of hiding all potential keystroke timing is not yet fixed. The keystroke timing issue would be solved by adding LINEMODE support as I did back in 2010. https://lists.mindrot.org/pipermail/openssh-unix-dev/2010-June/028732.html The code is still available here https://github.com/hyc/OpenSSH-LINEMODE/ If there's sufficient interest this time, I can probably bring it all up to date with a current OpenSSH version....

Hi folks. FYI: There's a discussion[0] about keystroke timing attacks against SSH going on on the cryptography mailing list. Would be interesting to hear the opinion of some OpenSSH folks what SSH/OpenSSH is doing against this and what could maybe be don in addition. Especially since the main idea behind the attack is obviously not limited to the initial authentication phase when a password

On Sun, 6 Aug 2023, Howard Chu wrote: >The keystroke timing issue would be solved by adding LINEMODE support as I did back in 2010. >https://lists.mindrot.org/pipermail/openssh-unix-dev/2010-June/028732.html Local line editing by using GNU libreadline? *shudder* No, thanks. bye, //mirabilos -- Infrastrukturexperte ? tarent solutions GmbH Am Dickobskreuz 10, D-53121 Bonn ? http://www.tarent....

Thorsten Glaser wrote: > On Sun, 6 Aug 2023, Howard Chu wrote: > >> The keystroke timing issue would be solved by adding LINEMODE support as I did back in 2010. >> https://lists.mindrot.org/pipermail/openssh-unix-dev/2010-June/028732.html > > Local line editing by using GNU libreadline? *shudder* No, thanks. I also ported it to use libedit instead, but readline is more widely used. -- -- Howard Chu CTO, S...

On Thu, 3 Aug 2023, Chris Rapier wrote: > Howdy all, > > So, one night over beers I was telling a friend how you could use the timing > between key presses on a type writer to extract information. Basically, you > make some assumptions about the person typing (touch typing at so many words > per second and then fuzzing the parameters until words come out). > > The I

...Fix typo in previous commit which forced some spans to always fail assignment. dahdi: First span registered becomes master by default. dahdi: Define POLLRDHUP on kernels < 2.6.17 wctdm24xxp, wcte12xp: Allow VPMADT032 commands more time to complete. wct4xxp: Allow linemode (T1/E1/J1) to be changed via sysfs attribute. wcte12xp: Allow linemode (T1/E1) to be changed via sysfs attribute. dahdi: Allow 'spantype' to be changed before span assignement via sysfs. dahdi: Remove dahdi_span.irq and move dahdi_span.irqmisses into dahdi_device....

...Fix typo in previous commit which forced some spans to always fail assignment. dahdi: First span registered becomes master by default. dahdi: Define POLLRDHUP on kernels < 2.6.17 wctdm24xxp, wcte12xp: Allow VPMADT032 commands more time to complete. wct4xxp: Allow linemode (T1/E1/J1) to be changed via sysfs attribute. wcte12xp: Allow linemode (T1/E1) to be changed via sysfs attribute. dahdi: Allow 'spantype' to be changed before span assignement via sysfs. dahdi: Remove dahdi_span.irq and move dahdi_span.irqmisses into dahdi_device....

Hey all, So I do some development based on openssh and I'm trying to think of some new projects that might extend the functionality, feature set, user workflow, performance, etc of ssh. So open ended question: Do any of you have a wish list of things you'd like to see in ssh? Mostly I'm just curious to see what the larger community is thinking of rather than being driven

...create_proc_read_entry() dahdi_dynamic_ethmf: Don't use create_proc_read_entry() dahdi: Replace create_proc_entry() with proc_create_data() oct612x: Fix confusing compile error when kernel source is not present wcte12xp: Reset all the framer registers when switching linemodes. wcte12xp: Allow non-interrupting cards to unload faster. dahdi: Completely stop spans when unassigning. dahdi: Prevent potential error when only switching spantype of single span. wcte12xp: Look for multiple loopup codes before setting looping up the framer. wc...

...create_proc_read_entry() dahdi_dynamic_ethmf: Don't use create_proc_read_entry() dahdi: Replace create_proc_entry() with proc_create_data() oct612x: Fix confusing compile error when kernel source is not present wcte12xp: Reset all the framer registers when switching linemodes. wcte12xp: Allow non-interrupting cards to unload faster. dahdi: Completely stop spans when unassigning. dahdi: Prevent potential error when only switching spantype of single span. wcte12xp: Look for multiple loopup codes before setting looping up the framer. wc...

...create_proc_read_entry() dahdi_dynamic_ethmf: Don't use create_proc_read_entry() dahdi: Replace create_proc_entry() with proc_create_data() oct612x: Fix confusing compile error when kernel source is not present wcte12xp: Reset all the framer registers when switching linemodes. wcte12xp: Allow non-interrupting cards to unload faster. dahdi: Completely stop spans when unassigning. dahdi: Prevent potential error when only switching spantype of single span. wcte12xp: Look for multiple loopup codes before setting looping up the framer. wc...

...create_proc_read_entry() dahdi_dynamic_ethmf: Don't use create_proc_read_entry() dahdi: Replace create_proc_entry() with proc_create_data() oct612x: Fix confusing compile error when kernel source is not present wcte12xp: Reset all the framer registers when switching linemodes. wcte12xp: Allow non-interrupting cards to unload faster. dahdi: Completely stop spans when unassigning. dahdi: Prevent potential error when only switching spantype of single span. wcte12xp: Look for multiple loopup codes before setting looping up the framer. wc...

...tly type-ahead. The longer delays (20+ms) also give a good chance to combine multiple keystrokes into a single packet, reducing overhead and confusing listeners. Practically, XX chars or a wait of `delay` would release the send buffer. That short wait would be like pressing "RETURN" in LINEMODE telnet. Fancier implimentations might use smart delays based on previous keystroke interval. nanosleep() and similar delay functions should be very useful so long as they're not so short as to busywait but instead wait for the system clock. This introduces a variable delay that greatly redu...

...de to centos 5.9 Shortlog of changes since 2.6.1: Doug Bailey (1): Assign NULL values to pointers to insure that future kfree calls do not cause errors. Oron Peled (1): xpp: usermode_helper() bugfix for kernels >= 3.3.0 Shaun Ruffell (12): wcte12xp: Destroy the cache if the linemode is not recognized. wcte12xp: Allow default_linemode to be set to j1. wcte12xp: Fix pulse digit detection when set for FXO signalling modes. wcte12xp: Fix stack corruption when checking T1 RBS states. dahdi: pci-aspm.h was included in 2.6.26 not 2.6.25. xpp: Do not typ...

...de to centos 5.9 Shortlog of changes since v2.6.1: Doug Bailey (1): Assign NULL values to pointers to insure that future kfree calls do not cause errors. Oron Peled (1): xpp: usermode_helper() bugfix for kernels >= 3.3.0 Shaun Ruffell (12): wcte12xp: Destroy the cache if the linemode is not recognized. wcte12xp: Allow default_linemode to be set to j1. wcte12xp: Fix pulse digit detection when set for FXO signalling modes. wcte12xp: Fix stack corruption when checking T1 RBS states. dahdi: pci-aspm.h was included in 2.6.26 not 2.6.25. xpp: Do not typ...

...de to centos 5.9 Shortlog of changes since v2.6.1: Doug Bailey (1): Assign NULL values to pointers to insure that future kfree calls do not cause errors. Oron Peled (1): xpp: usermode_helper() bugfix for kernels >= 3.3.0 Shaun Ruffell (12): wcte12xp: Destroy the cache if the linemode is not recognized. wcte12xp: Allow default_linemode to be set to j1. wcte12xp: Fix pulse digit detection when set for FXO signalling modes. wcte12xp: Fix stack corruption when checking T1 RBS states. dahdi: pci-aspm.h was included in 2.6.26 not 2.6.25. xpp: Do not typ...

...UILD_MODNAME dahdi: Backport try_wait_for_completion() and list_first_entry() wct4xxp: Print warning in dmesg if span priority is not set correctly. wct4xxp: Fix bipolar error insertion test mode. wct4xxp: VPM companding switch print is now debug only. wct4xxp: If linemode changed via sysfs, reset the complete part. wct4xxp, wcte13xp: Move the octasic DSP code into separate module. wcaxx: New driver for A4A/A4B/A8A/A8B analog cards. wcaxx: Update A4B firmware to version 0b0017 wcxb: Update the firmware meta block during flash update....