Re: Bug#130876: ssh: -5 discloses too much infomation to an attacker, security

2002-02-10 Thread Alex Pennace
On Sun, Feb 10, 2002 at 02:47:11AM +, Lazarus Long wrote: > As I have said in the past, this is definitely a security risk. > There is no reason that such information should be exposed to attackers. We may as well take down the debian.org web pages, since they expose a wealth of information to

Re: Bug#130876: ssh: -5 discloses too much infomation to an attacker, security

2002-02-10 Thread Alex Pennace
On Sun, Feb 10, 2002 at 02:47:11AM +, Lazarus Long wrote: > As I have said in the past, this is definitely a security risk. > There is no reason that such information should be exposed to attackers. We may as well take down the debian.org web pages, since they expose a wealth of information t

Re: Bug#130876: Very definitely a bug, security

2002-01-26 Thread Alex Pennace
On Sat, Jan 26, 2002 at 05:00:52AM +, Lazarus Long wrote: > Post your root password and IP address if you think obscurity is > irrelevant. (You are twisting a comment about *source* being available > for peer review in the crypto community, not about site-specifics being > open to all.) Apple

Re: Bug#130876: Very definitely a bug, security

2002-01-25 Thread Alex Pennace
On Sat, Jan 26, 2002 at 05:00:52AM +, Lazarus Long wrote: > Post your root password and IP address if you think obscurity is > irrelevant. (You are twisting a comment about *source* being available > for peer review in the crypto community, not about site-specifics being > open to all.) Appl

Re: GPG fingerprints

2001-09-14 Thread Alex Pennace
On Fri, Sep 14, 2001 at 09:02:31PM -0500, Warren Turkal wrote: > Is it ok to have your GPG fingerprint publicly available? Yes.

Re: GPG fingerprints

2001-09-14 Thread Alex Pennace
On Fri, Sep 14, 2001 at 09:02:31PM -0500, Warren Turkal wrote: > Is it ok to have your GPG fingerprint publicly available? Yes. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Debian hosting an open relay?

2001-07-17 Thread Alex Pennace
On Mon, Jul 16, 2001 at 01:54:48PM -0700, Wade Richards wrote: > All of my mail from the debian-security list is appearing in my spam > folder, because it appears that murphy.debian.org is in the ORBS list. > > Does anyone know if this is a Debian problem (I find it hard to believe > that there

Re: Debian hosting an open relay?

2001-07-17 Thread Alex Pennace
On Mon, Jul 16, 2001 at 01:54:48PM -0700, Wade Richards wrote: > All of my mail from the debian-security list is appearing in my spam > folder, because it appears that murphy.debian.org is in the ORBS list. > > Does anyone know if this is a Debian problem (I find it hard to believe > that there