5 ms·
If I'm understanding correctly, the difference is between knowing you have 60 and having to try (30000!/(60! * (30000 - 60)!) combinations and seeing if they wo
by gs17 3y ago
If I'm understanding correctly, the difference is between knowing you have 60 and having to try (30000!/(60! * (30000 - 60)!) combinations and seeing if they worked, which is quite a few.
- cchance 3y agoI mean the write up indicates you'd need access to the server side, or the pageant with the private key loaded, which both seem to be like... umm... at that point don't we have bigger issues?
- Khoth 3y agoNot sure about the pageant part, but it's a major problem when connecting to a compromised server leaks the client's private key. (For example, if an attacker has compromised server A and you connect to it, they can now use your key to connect to server B which you also use)
- leni536 3y agoNow I feel better for never using the same key for different servers.