Displaying 20 results from an estimated 3000 matches similar to: "[Bug 2971] New: Prevent OpenSSH from advertising its version number"
2019 Feb 20
2
[Bug 2971] New: Prevent OpenSSH from advertising its version number
Also, a lot of measurement/research on deployment of OpenSSH rely on
version advertising for their statistics. It's going to be harder to know
impact of deprecation of certain legacy features without statistics.
I also agree with Mark here.
On Wed, Feb 20, 2019 at 10:57 AM Mark D. Baushke <mdb at juniper.net> wrote:
> Nagesh writes:
>
> > Cyber security team has
2019 Feb 20
4
[Bug 2971] New: Prevent OpenSSH from advertising its version number
On 02/20/2019 07:51 AM, Mark D. Baushke wrote:
> There are too just many cases where both OpenSSH interoperating with
> itself as well as other SSH implementations have needed this version
> number to properly deal with bugs in the code via negitations.
FWIW, and without dismissing the possibility of fingerprinting a server
in other ways, the fact that clients that *can* pass
2015 Jun 12
2
[Bug 2302] with DH-GEX, ssh (and sshd) should not fall back to unconfigured DH groups or at least document this behaviour and use a stronger group
On Fri 2015-06-12 01:52:54 -0400, Mark D. Baushke wrote:
> I have communicated with Allen Roginsky on this topic and I have been given permission to post his response.
>
> In this message below, the 'vendor' was Darren Tucker's generated prime
> that used a generator value of 5.
>
> -- Mark
>
> From: "Roginsky, Allen" <allen.roginsky at
2007 Jul 23
3
sending email
HI i am presently new to this ror language can you please send me the
stepwise procedure for sending the email ......
--
Posted via http://www.ruby-forum.com/.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group.
To post to this group, send email to
2015 May 23
5
Name based SSH proxy
I am working on a proxy which can be hosted on a single
IP address and dispatch requests to different backends
depending on which hostname the client used to connect to
this IP address.
Currently such a proxy can be build to support HTTP, HTTPS,
SMTP, and DNS. However SSH support is impossible due to
the ssh client not sending the information such a proxy
would need.
I am not the first to want
2002 Mar 07
0
OpenSSH-3.1p1 AIX packaging bug [patch]
Hello,
The change in release number broke some some assumptions in
buildbff.sh:
* SSH_VERSION was always on the last line of version.h
* The OpenSSH version number would give a valid installp version (which
must have four parts).
Thanks to Mandar Mirashi for pointing this out.
Anyone affected can try the following patch which works for me and
hopefully will behave sanely in future.
-Daz.
2011 May 04
0
PATCH: update version to p2 in version.h
--- a/version.h
+++ a/version.h
@@ -2,5 +2,5 @@
#define SSH_VERSION "OpenSSH_5.8"
-#define SSH_PORTABLE "p1"
+#define SSH_PORTABLE "p2"
#define SSH_RELEASE SSH_VERSION SSH_PORTABLE
2014 Apr 20
2
bad bignum encoding for curve25519-sha256@libssh.org
Hi,
So I screwed up when writing the support for the curve25519 KEX method
that doesn't depend on OpenSSL's BIGNUM type - a bug in my code left
leading zero bytes where they should have been skipped. The impact of
this is that OpenSSH 6.5 and 6.6 will fail during key exchange with a
peer that implements curve25519-sha256 at libssh.org properly about 0.2%
of the time (one in every 512ish
2006 Feb 15
6
asterisk silence suppression?
Hi all, I'm getting some noise gate like effects on our sip lines & I think I need to disable silence supression, I'm searching docs & not finding where this can be set, does * have a setting to turn this off? basically what's happening is when we stop talking, the other end hears total silence, but when we talk, they can hear the background noise in the office, this sounds odd
2015 Oct 29
2
[Bug 2464] Adding timestamp to debug messages (log.c:do_log)
Darren Tucker <dtucker at zip.com.au> writes:
> On Thu, Oct 29, 2015 at 12:32 PM, Mark D. Baushke <mdb at juniper.net> wrote:
> > Diff updated with suggested changes (also, making the timestamp format
> > ISO8601 compliant).
> >
> > Hmmm... full IOS8601 compliance would include the timzeone so the format
>
> I don't have a copy of the ISO8601
2017 Sep 24
3
DH Group Exchange Fallback
On 09/24/2017 12:21 AM, Mark D. Baushke wrote:
> I suggest you upgrade to a more recent edition of the OpenSSH software.
> The most recent release is OpenSSH 7.5 and OpenSSH 7.6 will be released
> very soon.
This problem is in v7.5 and v7.6. See dh.c:436.
> OpenSSH 6.6 was first released on October 6, 2014.
I brought up v6.6 to give an example that older clients wouldn't be
2017 Sep 25
4
DH Group Exchange Fallback
On 25 September 2017 at 02:32, Mark D. Baushke <mdb at juniper.net> wrote:
> [+CC Loganaden Velvindron <logan at hackers.mu>] primary author of
> the RFC 4419 refresh draft.
https://datatracker.ietf.org/doc/draft-lvelvindron-curdle-dh-group-exchange/ ?
Tangent: has any consideration been given to increasing the maximum
allowed beyond 8192 bits (which is below the current NIST
2006 Sep 26
2
colClasses: supressed 'NA'
Hi,
The colClasses seem to be supressing 'NA' vlaues. How do I fix this?
R script and first 5 lines of output is below.
File "test2.dat" has blanks that are read as "NA" when I do not use
'colClasses', but as blanks when I use 'colClasses'.
temp.df <- read.fwf("test2.dat", width=c(10,1,1,1,1,2,2,3,3,1),
2015 Oct 29
2
[Bug 2464] Adding timestamp to debug messages (log.c:do_log)
https://bugzilla.mindrot.org/show_bug.cgi?id=2464
--- Comment #3 from Darren Tucker <dtucker at zip.com.au> ---
Created attachment 2741
--> https://bugzilla.mindrot.org/attachment.cgi?id=2741&action=edit
Changes as suggested.
Diff updated with suggested changes (also, making the timestamp format
ISO8601 compliant).
That said, what's the use case for this? The timestamps are
2004 Jan 30
3
Call quality questions
Our basic system is as follows:
P4 3.0 Ghz w/ HT, 1GB PC3200 RAM, 120 GB HDD, RH 9.0 OS, * from CVS
several weeks ago, working OK for routing, VM, and AA, calls in on
separate PSTN lines to Adtran TSU 600, into * server through T100P card.
The hardware is not taxed at all with little over 20% proc utilization
ever, low mem use, etc. All Phones are SNOM 200's with various firmware
revisions
2018 Nov 06
3
openSSH versions
Hi,
I notice here:
https://www.openssh.com/releasenotes.html
That the versions always have a <number> and a <number>p1.
Does the p1 indicate a patch? So does it mean that <number> and <number>p1 are two different versions?
It doesn?t describe the differences between the two in case they are different versions.
I would appreciate some clarification.
Thanks,
Roee.
2009 May 20
1
Supressing the enumeration of output in console
Hi!
Pretty low content question but I've had major trouble finding an answer for
it so I hope it's alright.
I'm obviously new to R, and have been trying to get rid of the numerated
output I get in the console.
What I mean more specifically is that
X<-4;X
comes out as
[1] 4
and I'd like to get rid of the listing [1].
This isn't usually a problem when working with the
2010 May 06
3
Supressing axes 3 and 4 when using plot()
Is there a way of doing this? I'm using plot() to produce a scatter of
my data, but it routinely defaults to plotting 2 sets of x axes and 2
y axes. I'd like to not plot the upper and rightmost axes. I can use
'axes=F', and then manually add axes with 'axis', but then the newly
created axes do not intercept.
TIA,
Dan
2011 Sep 30
1
Related combobox
hello,
i have 3 comboboxes, i want to load 2nd combobox based on the
value selected in 1st combobox. and 3rd combobox should be loaded
depending on the value selected in the 2nd combobox.
i have used observe field for 2nd and third combobox , it works
for the first combobox but not the second one.
--
Posted via http://www.ruby-forum.com/.
--
You received this message because you
2020 May 01
3
[PATCH] Use POSIX standardized options for head(1) and tail(1)
Hi Damien,
Damien Miller <djm at mindrot.org> writes:
> Thanks, but I don't think we're going to merge this one because I'm
> somewhat worried that some systems we currently build on do not support
> the -n syntax. Conversely, AFAIK everything* supports -number.
Michael Forney said that he was trying to run on a system that did NOT
support head -number and tail