Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
New SSH attack weakens passwords
Ann Harrison, SecurityFocus 2001-08-17

Researchers say the elapsed time between keystrokes can reveal much about your password.

Submit Comment Mode:
Name:
Subject:
Message:
 
  Enter the characters that appear above
 
passwd keystroke timing 2001-08-20
Zoltan Maroti
I don't know the protocol used to send password

in SSH but would it be hard to send the whole

password in one packet? Ie. till you don't hit

the enter no packet is sent by every keystroke.

This would defeat the information gaining on

sensitive data....

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus