Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Incidents
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: Weird SSH attack last night and this morning (still ongoing)

from [Valdis . Kletnieks] Network Security [Permanent Link]
Subject: Re: Weird SSH attack last night and this morning (still ongoing)
Date: Fri, 16 May 2008 13:30:11 -0400 
On Fri, 16 May 2008 01:17:48 BST, Alex Howells said:


of possible keys, it would only generate one of some 2^18 keys, making the
brute forcing much easier (if you had a botnet of 10,000 bots, you could
break a weak key with an average of only 13 probes per bot, as opposed to
the several million year's worth of probes it should have taken).


I'm somewhat curious where you get the 2**18 number, all reasonable
analysis seems to conclude it is actually 2**15 -- although if you


I cheated and looked at the tester that got released, it had 2**18 - 4
keys it checked for (and a quick look at the 4 missing spots shows that those
would likely have been discarded as "weak" keys - stuff like all-zeros, etc).

Attachment: pgpJJbdrCHO1h.pgp
Description: PGP signature

[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Re: Weird SSH attack last night and this morning (still ongoing), Valdis . Kletnieks
Next by Date:  RE: Possible Zombie/Bot?, admin
Previous by Thread:  Re: Weird SSH attack last night and this morning (still ongoing), Valdis . Kletnieks
Next by Thread:  Malware IRC/DNS Network Activity, Matteo Cantoni
Indexes:  [Date] [Thread] [Top] [All Lists]