<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Narnio&#187; exploid</title>
	<atom:link href="http://www.narnio.com/tag/exploid/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.narnio.com</link>
	<description>A day in the life of a software engineer</description>
	<lastBuildDate>Sat, 04 Feb 2012 18:31:54 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2</generator>
		<item>
		<title>Avoid Debian Exploid using SSH</title>
		<link>http://www.narnio.com/2008/05/22/avoid-debian-exploid-using-ssh/</link>
		<comments>http://www.narnio.com/2008/05/22/avoid-debian-exploid-using-ssh/#comments</comments>
		<pubDate>Thu, 22 May 2008 08:03:33 +0000</pubDate>
		<dc:creator>Jongerius</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Webdevelopment]]></category>
		<category><![CDATA[exploid]]></category>
		<category><![CDATA[SSH]]></category>
		<category><![CDATA[SSL]]></category>
		<category><![CDATA[upgrade]]></category>

		<guid isPermaLink="false">http://www.narnio.com/?p=196</guid>
		<description><![CDATA[Not so long ago news surficed that the SSH protocol used in Debian was a lot less then secure. It appears that you can easily guess the key used for the encryption of all data send between the client and the server. This would mean anyone could hack your debian server by just listening in [...]]]></description>
			<content:encoded><![CDATA[<p>Not so long ago news surficed that the SSH protocol used in Debian was a lot less then secure. It appears that you can easily guess the key used for the encryption of all data send between the client and the server.</p>
<p>This would mean anyone could hack your debian server by just listening in to the communication between you and it. This is of course not what you want so here are a few easy steps to upgrade the faulty components.</p>
<ol>
<li>First you must update the apt by entering <em><strong>apt-get update</strong></em></li>
<li>After this it&#8217;s time to update the SSL libraries by entering <em><strong>apt-get install libssl0.9.8</strong></em></li>
<li>Know that the encryption is a lot more secure again its time to generate new keys for the server this can be done by executing the following line:<br />
<em><strong>ssh-keygen -N &#8221; -t dsa -f /etc/ssh/ssh_host_dsa_key</strong></em></li>
<li>Also update the RSA key by entering:<br />
<em><strong>ssh-keygen -N &#8221; -t rsa -f /etc/ssh/ssh_host_rsa_key</strong></em></li>
<li>Last but not least is restarting the SSH service to complete the update, this is done by running:<br />
<strong><em>/etc/init.d/ssh restart</em></strong></li>
</ol>
<p>Please note that after doing this and reconnecting you will most likely get a warning stating the server changed certificates. Which is true as you&#8217;ve done just that in the above steps.</p>
<hr/>Copyright &copy; 2012 <strong><a  href="http://www.narnio.com">Narnio</a></strong>. This Feed is for personal non-commercial use only. If you are not reading this material in your news aggregator, the site you are looking at is guilty of copyright infringement. Please contact legal@jong-soft.com so we can take legal action immediately.]]></content:encoded>
			<wfw:commentRss>http://www.narnio.com/2008/05/22/avoid-debian-exploid-using-ssh/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

