Does the severe debian openSSH security bug effect the tablets?
 

I saw this on slashdot and have been busy regenerating all my SSH keys all morning:
http://lists.debian.org/debian-secur.../msg00152.html

I thought my tablet would be effected as well, as the version of OpenSSH shipped is high enough to have been vulnerable, but when I ran its server keys through the ssh-vulnkey tool, they came out as okay. The public keys I replaced as a matter of course.

Is the IT version of OpenSSH not based on debian's?

Re: Does the severe debian openSSH security bug effect the tablets?
 

Well, they might be affected...

Re: Does the severe debian openSSH security bug effect the tablets?
 

Quoting myself (http://www.internettablettalk.com/fo...&postcount=413) and Bundyo (http://www.internettablettalk.com/fo...&postcount=414) from elsewhere:

So, YMMV.

Re: Does the severe debian openSSH security bug effect the tablets?
 

quick question....if i wanna do remote desktop over the web from n800 to pc....is it essential to use open SSH to maximize security?? would you guys recommend it?...

Thanx!

Re: Does the severe debian openSSH security bug effect the tablets?
 

Thanks! I must have misread the version number; that explains why the server keys were good. What a good thing.

Jackass124: I would, especially if you are going to be entering in passwords and so on. Unlike VNC, remote desktop does have encryption, but all versions prior to 6 are vulnerable to a man in the middle attack, and I am not sure if using the rdesktop client makes you immune.

Re: Does the severe debian openSSH security bug effect the tablets?
 

jackass124: if you're running Windows on the PC then I'd use WinSCP and/or Putty to access the N800. I don't know if there's an easy way to do it the other way round - I suppose you'd have to use Samba. WinSCP and Putty use SSH and are as secure as it gets (unless you're running Debian/Ubuntu i suppose). Besides, with SSH you get a choice of crypto algorithms, SCP and SFTP for file transfers, and the ability to create tunnels or secure SOCKS proxies. All good stuff really.