Security Ripcord

I have to agree with Richard Bejtlich and the recent article in The Jem Report by Jem Matzan that we need to support OpenSSH better. I know that I use it and my employer (through a third party OS mentioned in Jem Matzan’s article) uses it. Of course up until this point we were both the same in the fact that we both have not supported the project. As of tonight that will change.

Richard and Jem, thank you for shaming us into reality. I hope your efforts work. And thank you OpenSSH for keeping the world safe (dramatic? Maybe, but then again, maybe not!)
Please donate to OpenSSH as soon as you can find the time. Especially if you are using it right now!

Cutaway

Personal Kudos on this one.

I have been included in another SANS Advisor article. This time the subject concerned moving from SSH password authentication to Pre-shared key authentication. It briefly (very briefly as we only have 250 words to work with) covers the importance of the moving way from the usual password authentication as well is pointing out a few concerns that go along with the move. The SANS newsletter is published in PDF format and the December, 2005 version is titled Advisor Vol.1 No. 5.