RE: Re: new openssh exploit in the wild! *isFAKE AS SH@!*

["Chris Eagle" <cseagle () redshift com>]

> Probably a scriptkiddie or some random idiot. The fun part was
> it came up totally different offsets then i mean TOTALLY different
> each time you ran it and if you gave it a offset it would "work"
> no matter what. For those people who ran it.. change all your 
> passwords. :)
>
> /Adam

That is because all the "offset" calculator does is call rand()

Chris

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html