Ubuntu
openssh package

  1. Bug #58074
  2. Comment #5

Comment 5 for bug 58074

Revision history for this message
Brian Ealdwine (eode) wrote : Re: [Bug 58074] Re: sshd hacked in only 50,000 tries

:-/ I didn't get badk to this, and this bug is closed now. ..but for
informational purposes...

Regarding password probabilities reflecting reality, I was assuming that the
root password that came with the system was randomly generated, and wouldn't
be subject to dictionary or probabilistic attacks.

I may have done an expert install, I'm not sure (too long ago). I know I
did not set a root password, though.

I don't know how long the password is, I didn't set it and was not prompted
for it.

Given that my problem was before the fix for the debian SSL key generation
issue, it could be presumed that someone realized the existence of the bug
before it was reported and fixed, and was exploiting that.