New SSH attack weakens passwords

New SSH attack weakens passwords
Ann Harrison, SecurityFocus 2001-08-17

Researchers say the elapsed time between keystrokes can reveal much about your password.

passwd keystroke timing 2001-08-20
Zoltan Maroti

SSH Keystroke Timing Attack 2001-08-20
Chris Leonardos <cleonardos (at) triumph (dot) com [email concealed]> (3 replies)

SSH Keystroke Timing Attack 2001-08-20
impetus (1 replies)

SSH Keystroke Timing Attack 2001-08-30
Anonymous SSH User

SSH Keystroke Timing Attack 2001-08-30
Anonymous Coward

The keystroke timings on passwords aren't usefull, but I'm sure one can still determine the length of the password to a decent degree.

On the other hand, initial passwords aren't the only interesting things to see as someone mentions here later.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/241/6821#6821

SSH Keystroke Timing Attack 2001-08-30
Chuck Geigner

how hard would it be 2001-08-30
Gerard Saraber

Why use password? 2001-08-30
Wkdpanda

Which keystrokes to find timings for. 2001-08-30
Todd Knarr <tknarr (at) silverglass (dot) org [email concealed]>