Berkeley CSUA MOTD:Entry 15695
Berkeley CSUA MOTD
 
WIKI | FAQ | Tech FAQ
http://csua.com/feed/
2025/04/04 [General] UID:1000 Activity:popular
4/4     

1999/4/5 [Computer/SW/Security] UID:15695 Activity:high
4/5     If sshd does host authentication for .shosts files why do people still
        say that .shosts is still insecure.  This is assuming that all the
        entries point to a computer that I maintain and I am the only user
        on that system.
        \_ how do i use shosts?  is it the same as rhosts?
        \_ if someone breaks into that system, they can steal the host
           key.  But .shosts is reasonably secure. -tom
           \_ How secure is having tcp-wrappers blocking all external
              connections and running this computer on a ppp dialup
              connection that times out after 15 minutes of inactivity.
              I'd think it would be pretty obvious if someone broke in.
                \_ tcpwappers probably doesn't wrap all your services. -tom
2025/04/04 [General] UID:1000 Activity:popular
4/4     

You may also be interested in these entries...
2009/6/29-7/3 [Computer/SW/Security] UID:53083 Activity:low 53%like:53089
6/28    Hello everyone,
Logins to soda are back open.  The new ssh key is
2048 4b:96:67:18:27:da:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX
Please allow public key authentication since it is more secure
than plain password. Also if you see this posting, it means
anybody could have posted the annoucement.  Because  the
	...
2009/6/29-7/3 [Computer/SW/Security] UID:53089 Activity:nil 53%like:53083
6/29    Please allow public key authentication since it is more
        secure than plain password.  If you see this posting, it
        means anybody could have posted the annoucement.  Because
        the official csua web site is still down., this makes it a
        little suspicious to the truly paranoid.
        p.s.  this web entry format is counter intuitive.  And how come
	...
2009/2/10-13 [Computer/SW/Security, Computer/SW/Unix] UID:52552 Activity:nil
2/10    I have an sh file that does a mount.. the mount does an
        authentication. I previosly stored the username and password
        from zenity prompts. However, I can't get a return on the password
        field. The following only works on the username:
        mount -t davfs "http://blahblah.com/BLahUser11" /mountdir << EOF
        ${username}
	...
2008/5/15-23 [Computer/SW/Security] UID:49961 Activity:nil
5/15    How is Facebook's authentication system different from OpenID?
        http://developers.facebook.com/documentation.php?doc=auth
        \_ I think the point might be that it is not?   We should get dans
           back on the motd, I bet he knows.  I miss his 50 lines tangents
           sometimes.
           \_ Conceptually it's the same as OAuth (which merged/is merging
	...
2007/9/27-10/2 [Computer/SW/Security] UID:48199 Activity:nil
9/27    Does anyone have experiences with OpenId and/or TypeKey as to
        minimize the effort spent on your web app authentication? How easy is
        it to integrate these 3rd party components into your web apps?
	...
2007/8/23-27 [Science/GlobalWarming, Computer/Companies/Google] UID:47724 Activity:nil
8/23    how do i view a private livejournal RSS feed in Google Reader?
        \_ I've tried this, and I don't think you can.  Livejournal provides
           a couple of (pretty poor) mechanisms for feeds, but Google
           Reader does not (last I checked) support any form of authentication.
           I had a script set up to screen-scrape LJ, log in as me and spit
           out an rss feed, but it broke and I haven't had the energy to
	...
2007/8/24 [Computer/SW/Security, Computer/SW/Unix] UID:47748 Activity:nil
8/24    Anybody experiencing login authentication problems?  I cannot login
        with unix passwd thru ssh, although I was able to login using my ssh
        auth keys/cert.  Then when I type passwd to change the passwd,
        I'm getting an LDAP passwd change prompt--but only once: if I type
        passwd again, I get the Unix passwd change prompt.  In any case,
        it won't accept my old passwd nor allow me to change the passwd.
	...
2007/8/24 [Computer/SW/Security, Computer/SW/Unix] UID:47749 Activity:high
8/24    Anybody experiencing login authentication problems?  I cannot login
        using my login and passwd thru ssh on the SECOND attempt and on:
        ie, when I do ssh csua, it works once, but not afterwards.
        Then when I do ssh http://csua.berkeley.edu, it works once, but not afterwards.
        I can STILL login when I use a machine that use ssh authorized public
        keys (with the ssh passwd), but not the unix login/passwd.
	...
2007/8/7-13 [Computer/SW/Languages/Perl, Computer/SW/Unix] UID:47555 Activity:nil
8/7     I'm trying to figure out whether it's possible for get wget to
        authenticate to a web page protected by a login form ('post'
        method to send username/pass, and cookies.)  Cookies don't seem
        to be the problem, with --save-cookies and --keep-session-cookies
        but getting the username/password submitted isn't doing it.  On
        this particular page, getting to a link, let's say 'example.aspx',
	...