Re: Security scanner

2006-01-23 Thread Danny De Cock
On Tue, 24 Jan 2006, Jaroslaw Tabor wrote: > Hi all! > > Has anyone know a network scanner I can run on Debian to search you can use the debian package "gnomba" to easily browse through all the windows shares that are available on your local network... very straightforward to use! kind re

Re: MD5 collisions found - alternative?

2004-08-25 Thread Danny De Cock
On Thu, 26 Aug 2004, Almut Behrens wrote: On Wed, Aug 25, 2004 at 01:15:13AM -0400, Hubert Chan wrote: ... So the only useful notion of oneway is that the hash is not easily invertible (i.e. you can't easily find some string that produces a given hash value). So, if you can somehow come up with a

Re: MD5 collisions found - alternative?

2004-08-24 Thread Danny De Cock
On Tue, 24 Aug 2004, Almut Behrens wrote: On Tue, Aug 24, 2004 at 09:18:46PM +0200, Danny De Cock wrote: On Tue, 24 Aug 2004, Almut Behrens wrote: On Tue, Aug 24, 2004 at 12:44:53PM +0200, Danny De Cock wrote: (...) but the verification of password hashes, such as used in pam, rely on the hash

Re: MD5 collisions found - alternative?

2004-08-24 Thread Danny De Cock
On Tue, 24 Aug 2004, Almut Behrens wrote: On Tue, Aug 24, 2004 at 12:44:53PM +0200, Danny De Cock wrote: (...) but the verification of password hashes, such as used in pam, rely on the hash function's oneway-feature rather than on its collision-resistance... not sure I understand -- s

Re: MD5 collisions found - alternative?

2004-08-24 Thread Danny De Cock
hi, it is true that collisions have been found in md5 (and a lot of other hash functions of that `family', cfr. the links you mention). this means that the hash functions should certainly no longer be used in applications relying on the collision-resistance of the hash function, e.g., everythin

Re: ssl on debian

2003-07-03 Thread Danny De Cock
have a look at /usr/local/ssl/bin. it may be wise to include /usr/local/ssl in your default PATH. cu, g. On Thu, 3 Jul 2003, Jim wrote: > Hey, > > i have installed openssl latest source, and everything installed fine, > but when i open a program that requires ssl it tells me ssl not > install

Re: ssl on debian

2003-07-03 Thread Danny De Cock
have a look at /usr/local/ssl/bin. it may be wise to include /usr/local/ssl in your default PATH. cu, g. On Thu, 3 Jul 2003, Jim wrote: > Hey, > > i have installed openssl latest source, and everything installed fine, > but when i open a program that requires ssl it tells me ssl not > install

Re: MAC-based ssh

2003-05-02 Thread Danny De Cock
hi, using mac addresses for client authentication seems to me as an extremely risky business as a mac address can easily be copied/cloned/spoofed... imho, it does not offer any authentication at all... g. On Fri, 2 May 2003, Hans van Leeuwen wrote: > Hello, > > My company has created an applica

Re: idle timeout

2002-08-18 Thread Danny De Cock
On Sun, 18 Aug 2002, xterm wrote: > I've been looking for some sort of utility (without success) that will > look at keyboard/mouse activity in X and then run a couple of > commands. I don't want to log the current use out (aka: idled > daemon), or lock the screen with xscreensaver (already done)

Re: debian-security-announce-$lang@lists?

2002-08-14 Thread Danny De Cock
On Wed, 14 Aug 2002, Siegbert Baude wrote: > So we have to think for those, who aren't able to follow this > discussion, too. > > I think as a system administrator, one is out of luck if one can't > > follow the English announcements anyway. > [snip] > > I dislike this attitude "No English, no IT"