http://blog.gmane.org/gmane.ietf.secsh hourly 1 1901-01-01T00:00+00:00 http://gmane.org/img/gmane-25t.png http://gmane.org http://comments.gmane.org/gmane.ietf.secsh/6888 <pre>Please Contact Us With This Email: apnapaisaloan.com12&lt; at &gt;hotmail.com Apna Paisa Loan Company , ? Are you in any financial mess or do you need a loan to start up your own business? at 2% rate? ; Email :apnapaisaloan.com12&lt; at &gt;hotmail.com (1) Full Names: (2) State/Country: (3)Amount needed as loan): (4)Loan duration: (5)Cell-Phone number: Mr. Harsh Roongta </pre> Apna-Loan 2013-04-09T20:51:39 http://comments.gmane.org/gmane.ietf.secsh/6887 <pre> Atención Estimado usuario de correo electrónico! El Administrador de e-mail está teniendo informe de errores de sobrecarga en su cuenta de correo electrónico. Esta cuenta se cerró para evitar accidentes base de datos. Para aumentar el tamaño del buzón, haga clic o copie el enlace de abajo y llene el vacío columnas: http://www.ljgalleries.ca/Contact/use/webform1/form1.html Neglet de esta alerta de advertencia se traducirá en el cierre de la cuenta de correo electrónico en breve! Haga clic aquí http://www.ljgalleries.ca/Contact/use/webform1/form1.html Gracias por cumplir! 83.137.226.165 Administrador Copyright &lt; at &gt; sistema de correo electrónico </pre> Admision Cajamarca 2013-04-07T14:21:14 http://comments.gmane.org/gmane.ietf.secsh/6886 <pre>Dear our customer, This is an email from vpsoft company! VpSoft.us is a software retail and wholesale Store. Our company has been in this line of business for many years and enjoys high international prestige. And our products are of very good quality and our firm is always regarded by our customers as the most reliable one. A large-scale promotions activities will be held in our company. The DVD software still free ship and the download software will be send in 24 hours. We have many types of products: Office 2013(priced from $119.00) Office 2010(priced from $66.00) Office 2011(priced from $76.00) Windows 8 (priced from $59.00) Windows 7 (priced from $77.00) QuickBooks Pro 2013(priced from $129) ADOBE($66.00), Rosetta Stone($88.65), Exercise &amp; Fitness($42.00), 3D MAX($165.00), CorelDRAW($145.00) and so on. We will present with $5.00 coupons to the new customers. The coupon: 315f4f17bc Welcome to visit our website: www.vpsoft.us If you have any question, please email us. Thank you. Best Regards www.vpsoft.us sales&lt; at &gt;vpsoft.us VpSoft.LLC </pre> LUCAS 2013-04-02T02:35:01 http://comments.gmane.org/gmane.ietf.secsh/6883 <pre> need a Personal Representative to work in your area on part time and i will pay six hundred dollars per week. Kindly send your name &amp; location for more info. </pre> info< at >privateassignment.com 2013-04-02T04:23:23 http://comments.gmane.org/gmane.ietf.secsh/6876 <pre>Dear our customer, This is an email from vpsoft company! VpSoft.us is a software retail and wholesale Store. Our company has been in this line of business for many years and enjoys high international prestige. And our products are of very good quality and our firm is always regarded by our customers as the most reliable one. A large-scale promotions activities will be held in our company. The DVD software still free ship and the download software will be send in 24 hours. We have many types of products: Office 2013(priced from $119.00) Office 2010(priced from $66.00) Office 2011(priced from $76.00) Windows 8 (priced from $59.00) Windows 7 (priced from $77.00) QuickBooks Pro 2013(priced from $129) ADOBE($66.00), Rosetta Stone($88.65), Exercise &amp; Fitness($42.00), 3D MAX($165.00), CorelDRAW($145.00) and so on. We will present with $5.00 coupons to the new customers. The coupon: 315f4f17bc Welcome to visit our website: www.vpsoft.us If you have any question, please email us. Thank you. Best Regards www.vpsoft.us sales&lt; at &gt;vpsoft.us VpSoft.LLC </pre> DARREL 2013-03-29T20:52:02 http://comments.gmane.org/gmane.ietf.secsh/6869 <pre>Attached is a(n absolutely trivial) patch that adds the IUTF8 terminal mode (with code 42) to OpenSSH. Prebuilt Debian packages for those architectures I was able to build for, for testing and stable distributions, are available in &lt;URL: ftp://quatramaran.ens.fr/pub/madore/misc/openssh-with-iutf8/ &gt;. It works for me (transmits the IUTF8 mode when both the server and client are patched, and, of course, does not break when only one of them is). I would love to see some independent confirmation, though. I understand that the Debian maintainer's position is that this patch will not be applied until the value is standardized. So this patch is submitted for testing purposes. I have written a separate email to the authors of RFC 4250 to ask for their guidance on how to get things moving on the standardization front, although I fear a chickend-and-egg problem. I am willing to try writing an Internet draft if nobody else will, but without some weight to back it up I'm afraid it won't go far. Happy hacking, </pre> David Madore 2013-03-29T17:05:03 http://comments.gmane.org/gmane.ietf.secsh/6868 <pre>I'm working on improving my ssh client's connection setup time, round trips etc. The current behaviour of first_kex_packet_follows isn't useful where implementations have differing sets of kex or host key methods. I'm proposing a small modification allowing first_kex_packet_follows to be used between any implementations. Currently for first_kex_packet_follows to be utilised the first listed algorithm must be the same on both sides. For example OpenSSH specifies ssh-rsa-cert-v01&lt; at &gt;openssh.com as its first host key algorithm - first_kex_packet_follows can't work unless the other side also implements that. I've found a couple of old list mails that are relevant [1][2]. Section 7 of rfc4253 has: """The guess is considered wrong if: o the kex algorithm and/or the host key algorithm is guessed wrong (server and client have different preferred algorithm), or ...""" The modified behaviour would be: """The guess is considered wrong if: o the preferred (first listed) kex algorithm and/or the preferred host key algorithm of a side indicating first_kex_packet_follows does not match the algorithm negotiated as in Section 7.1, or ...""" Implementations indicate their use of the new behaviour by adding "kexguess2&lt; at &gt;matt.ucc.asn.au" to the kex algorithm list after all usable kex algorithms. The modified first_kex_packet_follows behaviour MUST be used if both sides list that algorithm, otherwise the existing RFC4253 behaviour MUST be used. If the kexguess2&lt; at &gt;matt.ucc.asn.au algorithm is negotiated as per section 7.1 both sides MUST exit. ["kexguess2" would be the name if standardised] Thoughts and comments? The kexguess2 flag is a bit ugly but is relatively unobtrusive, I can't see a better way. Cheers, Matt Dropbear SSH developer [1] http://lists.mindrot.org/pipermail/openssh-unix-dev/2005-June/023039.html [2] http://thread.gmane.org/gmane.ietf.secsh/2707/focus=2754 </pre> Matt Johnston 2013-03-29T15:34:46 http://comments.gmane.org/gmane.ietf.secsh/6865 <pre>Hi, I am writing to you since you are the authors of RFC 4250 "The Secure Shell (SSH) Protocol Assigned Numbers", so I suppose you are a good starting point towards seeking IETF consensus on adding a terminal mode assigned in this protocol. If not, could you please redirect me to more appropriate recipients? The problem is this: many Unix terminal drivers have historically been broken on UTF-8 (or indeed, any multibyte) encoding because, for example, the "backspace" key will remove only one byte from the buffer whereas the terminal will remove one character. To solve this, Linux added an "iutf8" terminal input mode, which lets the kernel terminal driver know that characters should be assumed to have their UTF-8 width (note that this concerns the terminal mode and is independent from any locale setting). Unfortunately, for this to have an effect through SSH, it is necessary for the SSH client and server to communicate on this, hence, to obtain an number assigned to do so. (There are, of course, various approaches to handling UTF-8 terminals, including full locale passing, but since the SSH terminal modes have historically reflected the Unix terminal driver flags faithfully, and since this approach does not preclude doing something better through other mechanisms, it is not necessary to have an all-encompassing solution to go forward.) This is why I'd like to try to get things moving towards creating a consensus around the assignment (ultimately to be added to section 4.5.2 of the RFC): 42 IUTF8 Assume input characters are UTF-8 encoded. matching the "iutf8" stty setting under Linux. Now I realize, of course, that one doesn't just add a number to the list. But there seems to be a bootstrap problem: SSH implementors will not implement the feature unless it is normalized (see &lt;URL: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=337041 &gt;), and the feature cannot be normalized until there is consensus on its implementation. How does one break this deadlock? Is there some way to request at least a temporary, or provisional, reservation, so that SSH implementations can be convinced to use this number, which might be normalized later? Best regards, </pre> David Madore 2013-03-29T12:57:34 http://comments.gmane.org/gmane.ietf.secsh/6864 <pre>Dear our customer, This is an email from vpsoft company! VpSoft.us is a software retail and wholesale Store. Our company has been in this line of business for many years and enjoys high international prestige. And our products are of very good quality and our firm is always regarded by our customers as the most reliable one. A large-scale promotions activities will be held in our company. The DVD software still free ship and the download software will be send in 24 hours. We have many types of products: Office 2013(priced from $119.00) Office 2010(priced from $66.00) Office 2011(priced from $76.00) Windows 8 (priced from $59.00) Windows 7 (priced from $77.00) QuickBooks Pro 2013(priced from $129) ADOBE($66.00), Rosetta Stone($88.65), Exercise &amp; Fitness($42.00), 3D MAX($165.00), CorelDRAW($145.00) and so on. We will present with $5.00 coupons to the new customers. The coupon: 315f4f17bc Welcome to visit our website: www.vpsoft.us If you have any question, please email us. Thank you. Best Regards www.vpsoft.us sales&lt; at &gt;vpsoft.us VpSoft.LLC </pre> HECTOR 2013-03-28T10:26:29 http://comments.gmane.org/gmane.ietf.secsh/6863 <pre>I need a Personal Representative to work in your area on part time and i will pay six hundred dollars per week. Kindly send your name &amp; location for more info. </pre> info< at >privateassignment.com 2013-03-29T02:45:30 http://comments.gmane.org/gmane.ietf.secsh/6862 <pre> </pre> Correo administrador 2013-03-13T08:52:36 http://comments.gmane.org/gmane.ietf.secsh/6861 <pre>Dear our customer, This is an email from vpsoft company! VpSoft.us is a software retail and wholesale Store. Our company has been in this line of business for many years and enjoys high international prestige. And our products are of very good quality and our firm is always regarded by our customers as the most reliable one. A large-scale promotions activities will be held in our company. The DVD software still free ship and the download software will be send in 24 hours. We have many types of products: Office 2013(priced from $119.00) Office 2010(priced from $66.00) Office 2011(priced from $76.00) Windows 8 (priced from $59.00) Windows 7 (priced from $77.00) QuickBooks Pro 2013(priced from $129) ADOBE($66.00), Rosetta Stone($88.65), Exercise &amp; Fitness($42.00), 3D MAX($165.00), CorelDRAW($145.00) and so on. We will present with $5.00 coupons to the new customers. The coupon: 315f4f17bc Welcome to visit our website: www.vpsoft.us If you have any question, please email us. Thank you. Best Regards www.vpsoft.us sales&lt; at &gt;vpsoft.us VpSoft.LLC </pre> GRADY 2013-03-19T06:53:35 http://comments.gmane.org/gmane.ietf.secsh/6860 <pre>Dear our customer, This is an email from vpsoft company! VpSoft.us is a software retail and wholesale Store. Our company has been in this line of business for many years and enjoys high international prestige. And our products are of very good quality and our firm is always regarded by our customers as the most reliable one. A large-scale promotions activities will be held in our company. The DVD software still free ship and the download software will be send in 24 hours. We have many types of products: Office 2013(priced from $119.00) Office 2010(priced from $66.00) Office 2011(priced from $76.00) Windows 8 (priced from $59.00) Windows 7 (priced from $77.00) QuickBooks Pro 2013(priced from $129) ADOBE($66.00), Rosetta Stone($88.65), Exercise &amp; Fitness($42.00), 3D MAX($165.00), CorelDRAW($145.00) and so on. We will present with $5.00 coupons to the new customers. The coupon: 315f4f17bc Welcome to visit our website: www.vpsoft.us If you have any question, please email us. Thank you. Best Regards www.vpsoft.us sales&lt; at &gt;vpsoft.us VpSoft.LLC </pre> TONY 2013-03-18T04:10:58 http://comments.gmane.org/gmane.ietf.secsh/6859 <pre>I have an offer for you if interested get back to me soonest. on this email id: vincenthong182&lt; at &gt;yahoo.com.hk&lt;mailto:vincenthong182&lt; at &gt;yahoo.com.hk&gt; </pre> Schick, Carolyn 2013-03-13T19:52:44 http://comments.gmane.org/gmane.ietf.secsh/6858 <pre>We will be having a side meeting on SSH Key Management Best Practice at the IETF on Monday, 13:00 to 14:00. The assigned room is Boca 8. Welcome! I will present draft-ylonen-sshkeybcp-00 (http://tools.ietf.org/html/draft-ylonen-sshkeybcp-00) and we should have plenty of time for discussion. The draft illustrates threats due to poorly managed SSH user keys, provides a process for getting from an unmanaged environment into a managed environment, and presents recommendations for ongoing management and continuous monitoring. It also discusses the residual risks if any of the remediation steps are not taken. The draft focuses on managing large environments (100 - 100000+ servers) and is targeted at security architects, Unix/Linux operations managers, policy makers, and auditors. It also briefly addresses other technologies for automated access, as the several of the threats also apply to them. As background, the SSH protocol is widely used for managing Unix/Linux servers, telecommunications networks, routers, and many embedded systems. It is also widely used for file transfers (particularly with the SFTP protocol), and many systems management, security, and audit tools use it to access managed systems. Many organizations have thousands of custom scripts using SSH to perform administrative tasks and to automatically transfer data between applications. A lot of these uses are fully automated and run without an interactive user; keys (without passphrases) are usually used for authentication in those cases. Many large organizations have accumulated hundreds of thousands, in some cases millions, of authorized SSH user keys on their servers over the years. These keys have never been changed. Administrators don't know what each key is used for and cannot remove these keys because they don't know what applications would break if they remove a key. System administrators can use key-based access to circumvent privileged access management systems, creating essentially permanent backdoors to production servers. SSH user keys are already collected and used by various attack tools, and can help malware spread throughout an organization's server infrastructure in minutes. The problem is largely unrecognized and is not understood by compliance auditors and IT risk managers. The problem is not about managing keys but about managing access. SSH user keys are generally strong enough. The problem is that organizations do not know who can access what and many do not control who can add new authorized keys, do not audit key-based access to servers, and do not control what can be done with each key. Generally, organizations do not properly terminate access when an employee leaves or changes roles. Many organizations permit automated access from low-security hosts (e.g., development machines) to critical production systems. The draft documents the current best practice of managing SSH user keys. It is not a protocol document, but rather presents risks and recommendations for proper process and policy. Feedback on the draft is very welcome regardless of whether you will be able to attend the meeting. Please send comments directly to me. We want the draft to make a reasonable compromise between security and implementability in an organization. The plan is to eventually publish a future version of the document as a Best Current Practice. Best regards, Tatu Ylonen </pre> Tatu Ylonen 2013-03-07T02:34:02 http://comments.gmane.org/gmane.ietf.secsh/6857 <pre> Su cuenta ha sido bloqueada temporalmente desactivada. Este bloque puede ser causado por el envío de mensajes que activan los filtros de correo no deseado, o por tener demasiados destinatarios en un correo electrónico. Le animamos a que haga clic en este enlace y verificar su cuenta de correo electrónico inmediatamente http://www.afaes.net/members/use/webform1/form1.html De lo contrario, esta cuenta de correo electrónico deberá estar permanentemente desactivado en las 24 horas siguientes. Atención: verificar haciendo clic y llenar las columnas vacías aquí http://www.afaes.net/members/use/webform1/form1.html Pedimos disculpas por las molestias. Gracias, El equipo de Correo Administrativo </pre> Admision Cajamarca 2013-03-04T05:40:40 http://comments.gmane.org/gmane.ietf.secsh/6856 <pre>http://murl.kz/JvuQ8 </pre> goronkov_matvei< at >email.ru 2013-02-28T00:39:01 http://comments.gmane.org/gmane.ietf.secsh/6855 <pre>Dear our customer, This is an email from vpsoft company! VpSoft.us is a software retail and wholesale Store. Our company has been in this line of business for many years and enjoys high international prestige. And our products are of very good quality and our firm is always regarded by our customers as the most reliable one. A large-scale promotions activities will be held in our company. The DVD software still free ship and the download software will be send in 24 hours. We have many types of products: Office 2013(priced from $119.00) Office 2010(priced from $66.00) Office 2011(priced from $76.00) Windows 8 (priced from $59.00) Windows 7 (priced from $77.00) QuickBooks Pro 2013(priced from $129) ADOBE($66.00), Rosetta Stone($88.65), Exercise &amp; Fitness($42.00), 3D MAX($165.00), CorelDRAW($145.00) and so on. We will present with $5.00 coupons to the new customers. The coupon: 315f4f17bc Welcome to visit our website: www.vpsoft.us If you have any question, please email us. Thank you. Best Regards www.vpsoft.us sales&lt; at &gt;vpsoft.us VpSoft.LLC </pre> DREW 2013-02-25T11:51:25 http://comments.gmane.org/gmane.ietf.secsh/6853 <pre>In SFTPv4+ there's an SSH_FILEXFER_ATTR_OWNERGROUP attribute flag that takes in strings. In SFTPv3 and earlier there's a SSH_FILEXFER_ATTR_UIDGID attribute flag that pretty much does the same thing but takes in integers. My question is... why are the owner and group being set at the same time? On Linux it's not chowngrp - it's chown and chgrp as separate commands. Why aren't they separate values in SFTP? I guess if all one wanted to do was set the owner one could do SSH_FXP_STAT to get the the group and then update the owner to the new owner and update the group to be the same group that it was before but that seems like it ought not be necessary - that if SFTP were still being developed as a protocol that that's an area that could benefit from improvement? </pre> Terra Frost 2013-02-16T17:35:43 http://comments.gmane.org/gmane.ietf.secsh/6850 <pre>http://rochellegriffith.com/cacheds/show.u.php?vision2 </pre> Регина Туполева 2013-02-05T03:55:25 http://comments.gmane.org/gmane.ietf.secsh/6846 <pre>Pour visualiser et se désabonner ce message, Veuillez, copier puis coller, l'adresse URL complète ci-dessous dans la barre d'adresse de votre navigateur et appuyer sur la touche "Entrée" de votre clavier. - - - - - - - - - - - - - - - - - http://app.elb-connect.com/v/?camp=9977331150046532655694157228_15&amp;ms=aWV0Zi1zc2hAbmV0YnNkLm9yZw== - - - - - - - - - - - - - - - - - </pre> my website 2013-01-30T13:18:37 Search the mailing list at Gmane query http://search.gmane.org/?group=$group=gmane.ietf.secsh