Re: Root Kits for Openbsd

> Actually I'm only interested in defending against being rooted

FTP is a stupid, insecure protocol. IIRC, obsd doesn't use it by default. Anyone sitting between you and your FTP server can see your password, in plain text. Use scp, OpenBSD comes with it, and you aren't going to get rooted. What you're really asking here is "is there a rootkit for a machine running obsd upon which people are doing stupid things with their passwords?" The answer is yes. Off the top of my head, t0rn does this.

It makes me ill to know there are people out there using an operating system like obsd and sending their passwords in plain text. I bet you pop your mail in plain text too.

Sheesh.

Alex Received on Fri Mar 7 20:11:40 2003