Tag Info

Hot answers tagged

8

Yes. SSH has standardized and quite distinct handshake packets, so you can very easily detect an SSH session initiation. Here is a transcription of Wireshark capture of an SSH session initiation: Encrypted request packet len=41 Encrypted response packet len=39 Client: Key Exchange Init Server: Key Exchange Init Client: Diffie-Hellman Key Exchange Init ...


5

There are many automated bots out there that will try to attack SSH servers, but if you take a few precautions you can actually make SSH very safe. Disable password-based login completely, and make public/private key pairs the only way to log in. This page provides information on how you can disable password login, and this one shows you how to set up key ...


4

You might want to try using a QR code to copy the key over. Generate the QR code on the laptop and scan it using your phone's camera. Obviously, dont use an online service to generate it, linux has a qrencode library which does that. I have tried converting my PGP public key into a QR code and the phone successfully read it. However, if your ssh key is too ...


1

Set up an FTP server on your phone, and access it from your computer's file manager by typing the address in the path bar. From there, it's just a copy and paste matter. If you don't trust your local network from possible sniffers, use SFTP instead of FTP. I used an Open Source FTP client I don't remember its name. But you can also use ES File Explorer (it ...


1

I believe the enterprise grade key agents from ssh.com utilise these scheme's inside there environments. (I have not been able to found a "proof" of that, just a educated guess based on the authors of the IFC Draft and the "hints" on the ssh.com product specs.) the features the list seem to be able to do the things listed in the draft.


1

Passwords can be easy to forget. can be easy to guess / crack. can have different contraints in terms of characters you can use, length... are very often re-used on different services. have you heard of those passwords database leaked? Challenge-Response can comprise any amount of challenges (e.g. enter 3 passwords in a row) can support one-time ...


1

Yubikey can either be cloud-based with Yubi providing the "yes/no" answer or you can run it locally. Run locally and benefit from the OTP.


1

1.Yes it is correct. There are 2 possible ways: A) Alice blindly accept the new fingerprint from the attacker mallory. Alice and Mallory could connect and authenticate each other. Problem here for Mallory is, that he couldnt sign the session id, exchanged with Bob. Because Mallory dont own the private key from Alice. And also Mallory couldn`t ...


1

Yes, password credentials can still be stolen through a man-in-the-middle method with SSHv2. The victim profile will depend on the type of man-in-the-middle method used. For your example of arp poisoning from a client workstation, arp poisoning would maximally really grant middling between clients on the nearby local network, or all clients if the server ...


1

While I do not want to promote commercial software, I know ssh.com is selling a software called "Universal SSH Key manager" that can discover, monitor, remidiate and manage SSH keys throughout an enterprise. They describe their product with the following quote: Your enterprise may have more Secure Shell identities than employees. A lot more. Gain ...


1

I'd suggest placing another box in front of your router and running pfSense. Even Raspberry PI with pfSense can handle normal traffic but it'll choke with fast throughput. If you can afford to spend $169 or so, there are some more powerful hw firewall products with pfSense preinstalled at store.netgate.com.



Only top voted, non community-wiki answers of a minimum length are eligible