Changes between Version 2 and Version 3 of lowdown-drafts-053008


Ignore:
Timestamp:
Jun 2, 2008, 2:59:52 PM (17 years ago)
Author:
Jamie McClelland
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • lowdown-drafts-053008

    v2 v3  
    1515Debian is a free operating system that uses the GNU tools and the Linux kernel; it's the operating system we use on our servers.
    1616
    17 An exploit is a piece of code that can be used by a clever attacker to get
    18 access to a server and do damage, steal data or illicitly use resources.
     17An exploit is a piece of code that can be used by a clever attacker to get access to a server and do damage, steal data or illicitly use resources.
    1918
    20 One other definition: an RSA key. An RSA key is a long string
    21 of characters that is unique to every server that provides the basis for the
    22 server to establish a secure, encrypted connection with computers that connect
    23 to it.
     19One other definition: an RSA key. An RSA key is a long string of characters that is unique to every server that provides the basis for the
     20server to establish a secure, encrypted connection with computers that connect to it.
    2421
    2522These software packages are developed by large numbers of people all over the world who merely contribute to them; that's what Free and Open Source Software is. Free software developers work through collaborative work systems and they communicate on-line. Most have never met each other in person.
     
    2724In this case, one person filed a report and the community's leaders  checked
    2825and approved it. It seems that, with the most widely-distributed version of Debian installed throughout the
    29 world, you can guess certain parts of the key that are supposed to be
     26world, you can guess certain parts of the RSA key that are supposed to be
    3027generated randomly.  These means that, eventually, you may be able to guess the
    31 key itself.
     28RSA key itself.
    3229
    3330They released a "patch" to fix this and we installed it on all servers  but,