Re: Is this normal?

ethercap (ettercap) can do SSH1 too.
--- xyberpix <xyberpix@xyberpix.com> wrote:

> SSH doesn't use cleartext, but version one can be sniffed quite easily
> with dsniff. :-)
> Maybe that's what was meant?
>
> xyberpix
>
> On Sat, 23 October, 2004 5:50 am, Jonathan Loh said:
> > I thought ssh did not send cleartext?  Granted you can see source and
> > destination and the fact that they are using ssh if you sniff when the
> > session
> > is starting, but no passwords are sent cleartext.  But you'd be able to
> > see
> > that anyway.  Though I think someone here mentioned in the ssh, not
> > openssh,
> > implementation there is a provision to send things in cleartext, though
> > that
> > has to be configured.
> >
> > Sure you can use hostkeys.  hostkeys will verify that you are logging in
> > from a
> > certain host.  But I also recomend you use passwords.
> >
> > --- bp1974@comcast.net wrote:
> >
> > > * Disable clear text services (telnet,ssh etc.)
> >
> >
> >
> >
> > __________________________________
> > Do you Yahoo!?
> > Yahoo! Mail Address AutoComplete - You start. We finish.
> > http://promotions.yahoo.com/new_mail
>
>
> -- 
> For security and Opensource news check out:
> http://xyberpix.demon.co.uk


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com