Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on SSH Brute Force – The 10 Year Old Attack That Still Persists. Parent comment
but i get the impression that still doesn't mean that ssh can be made to work with system passwords without transmitting them (over an encrypted channel). i don't understand why - maybe srp requires a particular kind of hash?
ah yes - this answer http://security.stackexchange.com/questions/23821/srp-can-th... gives some details.
There are no comments on this comment yet.
but i get the impression that still doesn't mean that ssh can be made to work with system passwords without transmitting them (over an encrypted channel). i don't understand why - maybe srp requires a particular kind of hash?
ah yes - this answer http://security.stackexchange.com/questions/23821/srp-can-th... gives some details.