Security Incidents mailing list archives

Re: SSH bruteforce on its way...


From: Justin <justinvinn () gmail com>
Date: Mon, 24 Oct 2005 14:09:03 -0400

Jouser,

Nah, there were some exploits a while back that took advanteage in
some timing flaws in the SSHd that let attackers determin valid
usernames.

peace,
--Justin

On 21 Oct 2005 18:05:27 -0000, jouser () gmail com <jouser () gmail com> wrote:
I didn't think it was possible to determine valid usernames by themselves?  You either have a valid username AND 
password or not.



Current thread: