/wp

waving android

I am currently a software engineer at Google, where as a member of the Android platform team I build frameworks and user interfaces.

The blog here at is mostly historical; you can find more recent posts on .

The exploit in OpenSSH is finally described.

June 26th, 2002


The exploit in OpenSSH is finally described. The hole can be
closed by turning off unused authentication schemes in your sshd, or by
turning on privilege separation (available in server version 3.3 and later).
OpenSSH 3.4, which patches the vulnerability, is available from openssh.com.

newer: older: