[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: The Talk: ssh - are you nuts!?!



Your welcome to the come to the talk.
OpenBSD and OpenSSH people are also welcome.
I disagree with your statement.

On  4 Jan, Internet Chat wrote:
> Sending this to the guys who made OpenSSH, is really bad taste.
> 
> It's like me sending a mesages saying ur "talk" is useless, evil and ....
> 
> i don't think the developers like it.
> 
> On Thu, 4 Jan 2001 opentrax@email.com wrote:
> 
>> 
>> 			SSH - are you nuts!?!
>> 			by Jesus Monroy, Jr.
>> 
>> I'm too tired to get this out, but i promised it would
>> be available, so here it is.
>> 
>> The Offical Part
>> ----------------
>> On Jan. 4, 2001, a talk entitled "ssh - are you nuts!?!"
>> will be given at the SVBUG (Silicon Valley BSD User Group)
>> monthly meeting by Club President Jesse Monroy, Jr.
>> Details available at:
>> 
>> 	http://www.svbug.com/events/
>> 
>> 
>> My part
>> -------
>> Today at 7:45pm (local time) this talk will start.
>> People say I'm nuts, sometimes I think they are
>> right. Currently, I've heard hundreds of points
>> of views, read dozens of papers, and comtemplated
>> solutions with vicious circles. Two days before
>> Christmas I related this to my brother-in-law,
>> a Havard/Yale/Cambridge MBA. His response was,
>> "Builds character."; hmm.. Thanks.
>> 
>> Other club presidents ask me, "Are you serious
>> about this?" My business partner expressed, just 
>> after Christmas, "Is this worth it?"  I'll admit, 
>> at times, this whole thing has been a bit crazy.
>> 
>> So as I've said today at 7:45pm local time, here
>> in Silicon Valley, I will be speaking. 
>> The title is "SSH - are you nuts!?!"
>> 
>> What do I mean by this? Well to get exactly what
>> I mean you may:
>> 
>> 1) Come to the talk. Details are available at:
>> 	http://www.svbug.com/events/
>> 2) See my notes after the talk - posted to:
>> 	http://www.svbug.com/past/
>> 3) Or see the event with on-line video
>>    when it's available later this year.
>> 
>> For those you you interested, below are selected points from my talk.
>> -------------------------------------------------------------------
>> -What I won't  be saying
>> 	-SSH is evil.
>> 	-SSH is useless.
>> 	-SSH is a bad idea.
>> 	-Authentication/Encryption is a hoax or does not work.
>> 	-Public Key Encryption does not work. (I have no proof.)
>> 	-I can break Public Key Encryption. (At least, not now.)
>> 	-I USE SSH. (1 or 2)
>> 	-I never intend to use SSH.
>> 	-My systems have never been compromised.
>> -My frame of reference
>> -What I will be saying
>> 	-Voice my personal complaints
>> 	-Expose encryption/security myths
>> 	-Investigate the technical specs/issues
>> 	-Investigage Technical, Social, Economic, Financial Problems
>> 	-Investigate attackers and attacks
>> 	-Tell you where to get SSH
>> 	-Showing alternatives
>> -Why I'm doing this
>> -My Personal Complaints
>> -What people have to say
>> -SSHv1 vs. SSHv2
>> -SSHv2 Features
>> -The SSH Specs (the problems within)
>> -Authentication/Encryption - Two methods to argue
>> 	-can never be broken
>> 	-can always be broken
>> -SSH(v2) Faults
>> 	-New Technical problems it creates
>> 	-Technical Problems outside of SSH control
>> 	-There are common misconceptions about it's functionality
>> 	-Social Problems
>>         -Economic Problems
>> 	-Financial Problems
>> 	-Still Subject to ...
>> -Who wants your data
>> -What is the Man-In-The-Middle
>> -Your Governments Involvement
>> -What SSH programs there are
>> -What alternatives you have
>> 	-Start with a Strategem
>> 	-Technical Prevention
>> 	-Technical Counter Measures
>> -Last words
>> 
>> 
>> 
>> 
> 
> 
> 
> 
>