<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Morph3ous&#039;s Weblog &#187; Security</title>
	<atom:link href="http://www.morph3ous.net/category/technology/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.morph3ous.net</link>
	<description>Random IT Stuff</description>
	<lastBuildDate>Wed, 17 Aug 2011 01:29:46 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
		<item>
		<title>More useful SELinux links</title>
		<link>http://www.morph3ous.net/2009/05/01/more-useful-selinux-links/</link>
		<comments>http://www.morph3ous.net/2009/05/01/more-useful-selinux-links/#comments</comments>
		<pubDate>Sat, 02 May 2009 01:30:45 +0000</pubDate>
		<dc:creator>Brian</dc:creator>
				<category><![CDATA[SELinux]]></category>

		<guid isPermaLink="false">http://www.morph3ous.net/?p=189</guid>
		<description><![CDATA[I hope these links help anyone who is also trying to learn SELinux to use MAC in an attempt to better secure their systems. Getting started with SELinux Creating SELinux policies simplified SELinux policies PDF (from the NSA) The unofficial SELinux FAQ]]></description>
		<wfw:commentRss>http://www.morph3ous.net/2009/05/01/more-useful-selinux-links/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SELinux</title>
		<link>http://www.morph3ous.net/2009/04/30/selinux/</link>
		<comments>http://www.morph3ous.net/2009/04/30/selinux/#comments</comments>
		<pubDate>Thu, 30 Apr 2009 23:09:52 +0000</pubDate>
		<dc:creator>Brian</dc:creator>
				<category><![CDATA[SELinux]]></category>

		<guid isPermaLink="false">http://www.morph3ous.net/?p=187</guid>
		<description><![CDATA[I am trying to learn SELinux. This link looks useful because it tries to simplify the system. I will probably write about it some more later, but wanted to put this link up here. http://fedoraproject.org/wiki/SELinux/Understanding]]></description>
		<wfw:commentRss>http://www.morph3ous.net/2009/04/30/selinux/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Obama DOJ and warrantless wiretapping &#8211; EFF</title>
		<link>http://www.morph3ous.net/2009/04/09/obama-doj-and-warrantless-wiretapping-eff/</link>
		<comments>http://www.morph3ous.net/2009/04/09/obama-doj-and-warrantless-wiretapping-eff/#comments</comments>
		<pubDate>Thu, 09 Apr 2009 17:15:54 +0000</pubDate>
		<dc:creator>Brian</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Philosophy]]></category>
		<category><![CDATA[Politics]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Wiretapping]]></category>

		<guid isPermaLink="false">http://www.morph3ous.net/?p=183</guid>
		<description><![CDATA[There is additional analysis of the situation that I first mentioned in this post. The Electronic Frontier Foundation (EFF) is of the opinion that the Obama Administration&#8217;s Department of Justice is worse than that of Bush. Here is an excerpt from the EFF&#8217;s take on the situation: Previously, the Bush Administration has argued that the U.S. possesses &#8220;sovereign immunity&#8221; from suit for conducting electronic surveillance that violates the Foreign Intelligence Surveillance Act (FISA). However, FISA is only one of several laws that restrict the government&#8217;s ability to wiretap. The Obama Administration goes two steps further than Bush did, and claims that the US PATRIOT Act also renders the U.S. immune from suit under the two remaining key federal surveillance laws: the Wiretap Act and the Stored Communications Act. Essentially, the Obama Adminstration has claimed that the government cannot be held accountable for illegal surveillance under any federal statutes. Again, the gulf between Candidate Obama and President Obama is striking. As a candidate, Obama ran promising a new era of government transparency and accountability, an end to the Bush DOJ&#8217;s radical theories of executive power, and reform of the PATRIOT Act. But, this week, Obama&#8217;s own Department Of Justice has argued [...]]]></description>
		<wfw:commentRss>http://www.morph3ous.net/2009/04/09/obama-doj-and-warrantless-wiretapping-eff/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Obama Administration (DOJ): Not a good precedent on wiretapping</title>
		<link>http://www.morph3ous.net/2009/04/07/obama-administration-doj-not-a-good-precedent-on-wiretapping/</link>
		<comments>http://www.morph3ous.net/2009/04/07/obama-administration-doj-not-a-good-precedent-on-wiretapping/#comments</comments>
		<pubDate>Wed, 08 Apr 2009 04:43:07 +0000</pubDate>
		<dc:creator>Brian</dc:creator>
				<category><![CDATA[Philosophy]]></category>
		<category><![CDATA[Politics]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Wiretapping]]></category>

		<guid isPermaLink="false">http://www.morph3ous.net/2009/04/07/obama-administration-doj-not-a-good-precedent-on-wiretapping/</guid>
		<description><![CDATA[Please read this analysis on Salon. I hope that the administration responds and clarifies some of their language if the analysis does not reflect their intent. http://www.salon.com/opinion/greenwald/2009/04/06/obama/index.html: Every defining attribute of Bush&#8217;s radical secrecy powers &#8212; every one &#8212; is found here, and in exactly the same tone and with the exact same mindset. Thus: how the U.S. government eavesdrops on its citizens is too secret to allow a court to determine its legality. We must just blindly accept the claims from the President&#8217;s DNI that we will all be endangered if we allow courts to determine the legality of the President&#8217;s actions. Even confirming or denying already publicly known facts &#8212; such as the involvement of the telecoms and the massive data-mining programs &#8212; would be too damaging to national security. Why? Because the DNI says so. It is not merely specific documents, but entire lawsuits, that must be dismissed in advance as soon as the privilege is asserted because &#8220;its very subject matter would inherently risk or require the disclosure of state secrets.&#8221;]]></description>
		<wfw:commentRss>http://www.morph3ous.net/2009/04/07/obama-administration-doj-not-a-good-precedent-on-wiretapping/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>YouTube: Change a Windows XP password using the command prompt without entering the old password</title>
		<link>http://www.morph3ous.net/2006/10/09/youtube-change-a-windows-xp-password-using-the-command-prompt-without-entering-the-old-password/</link>
		<comments>http://www.morph3ous.net/2006/10/09/youtube-change-a-windows-xp-password-using-the-command-prompt-without-entering-the-old-password/#comments</comments>
		<pubDate>Mon, 09 Oct 2006 20:16:38 +0000</pubDate>
		<dc:creator>Brian</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>

		<guid isPermaLink="false">http://www.morph3ous.net/2006/10/09/youtube-change-a-windows-xp-password-using-the-command-prompt-without-entering-the-old-password/</guid>
		<description><![CDATA[Bravo Microsoft! The video embeded below shows how to change the password of the current user account that you are logged in under without entering the previous password. This kind of thing should not work. I will have to test to see if Vista is susceptible to this &#8220;hack&#8221;. The operating system should always ask you for the old password before allowing you to change it. Hopefully this only works when logged in to an administrator account. In Unix the superuser can change other user&#8217;s passwords without knowledge of the old password. If logged in as any other account you can change only your own password after typing in your old password. Here&#8217;s what to do: net user shows you who you are logged in as net user &#60;account&#62; * allows you to change the password Video:]]></description>
		<wfw:commentRss>http://www.morph3ous.net/2006/10/09/youtube-change-a-windows-xp-password-using-the-command-prompt-without-entering-the-old-password/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>MiamiHerald.com &#124; 09/18/2006 &#124; Securing sensitive data</title>
		<link>http://www.morph3ous.net/2006/10/06/miamiheraldcom-09182006-securing-sensitive-data/</link>
		<comments>http://www.morph3ous.net/2006/10/06/miamiheraldcom-09182006-securing-sensitive-data/#comments</comments>
		<pubDate>Fri, 06 Oct 2006 18:06:21 +0000</pubDate>
		<dc:creator>Brian</dc:creator>
				<category><![CDATA[Politics]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.morph3ous.net/2006/10/06/miamiheraldcom-09182006-securing-sensitive-data/</guid>
		<description><![CDATA[MiamiHerald.com &#124; 09/18/2006 &#124; Securing sensitive data Recently, The Miami Herald brought to light the threat of identity theft facing Floridians because of the prevalence and accessibility of personal information online Public records easy targets for ID thieves, Aug. 27. This follows the announcement by the Transportation Department that two computers containing sensitive data &#8212; in one case, the personal information of more than 133,000 Floridians &#8212; have been stolen in the last several months.]]></description>
		<wfw:commentRss>http://www.morph3ous.net/2006/10/06/miamiheraldcom-09182006-securing-sensitive-data/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>BusinessWeek: If They Can&#8217;t See, They Can&#8217;t Steal</title>
		<link>http://www.morph3ous.net/2006/10/01/businessweek-if-they-cant-see-they-cant-steal/</link>
		<comments>http://www.morph3ous.net/2006/10/01/businessweek-if-they-cant-see-they-cant-steal/#comments</comments>
		<pubDate>Sun, 01 Oct 2006 18:48:13 +0000</pubDate>
		<dc:creator>Brian</dc:creator>
				<category><![CDATA[Florida]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>

		<guid isPermaLink="false">http://www.morph3ous.net/2006/10/01/businessweek-if-they-cant-see-they-cant-steal/</guid>
		<description><![CDATA[BusinessWeek recently reported on the growing trend of using fog machines to deter criminals. Stores fill up with fog when the alarm is triggered making it much more difficult for the criminal to steal anything. I read this in the magazine and only found one reference to it online from which I have quoted below. KeepMedia &#124; BusinessWeek: If They Can&#8217;t See, They Can&#8217;t Steal: Stores are starting to smoke out burglars &#8212; literally. Looking for security systems beyond alarms and unsightly iron roll-up gates, some retailers are trying a newer deterrent: a fog machine. Once the system, installed in a corner or on a wall or ceiling, is triggered by someone breaking and entering, it takes just a minute to create a dense, nontoxic fog that obscures visibility. Burglars can panic, groping their way out of the store without stealing anything. That&#8217;s what happened during a recent break-in at a CVS in Florida, one of a handful of outlets at which the drugstore chain is testing the device.]]></description>
		<wfw:commentRss>http://www.morph3ous.net/2006/10/01/businessweek-if-they-cant-see-they-cant-steal/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Techworld.com: WiFi fingerprints could end MAC spoofing</title>
		<link>http://www.morph3ous.net/2006/09/05/techworldcom-wifi-fingerprints-could-end-mac-spoofing/</link>
		<comments>http://www.morph3ous.net/2006/09/05/techworldcom-wifi-fingerprints-could-end-mac-spoofing/#comments</comments>
		<pubDate>Wed, 06 Sep 2006 00:16:00 +0000</pubDate>
		<dc:creator>Brian</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>

		<guid isPermaLink="false">http://www.morph3ous.net/2006/09/05/techworldcom-wifi-fingerprints-could-end-mac-spoofing/</guid>
		<description><![CDATA[Read below for a new technique that may help to eliminate MAC spoofing on wireless networks. It remains to be seen how much processing power this may need once the process is refined. Techworld.com &#8211; WiFi fingerprints could end MAC spoofing: Every wireless device has a unique signal &#8220;fingerprint&#8221; produced by variations produced in the manufacturing process for silicon components, according to Dr Jeyanthi Hall, of Carleton University in Ottawa. As a doctoral student, Dr Hall analysed the RF signals of fifteen devices from six manufacturers, and found it was possible to distinguish clearly, even between devices from the same manufacturer.]]></description>
		<wfw:commentRss>http://www.morph3ous.net/2006/09/05/techworldcom-wifi-fingerprints-could-end-mac-spoofing/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Hugg / The American Voting System: HACKED</title>
		<link>http://www.morph3ous.net/2006/08/25/hugg-the-american-voting-system-hacked/</link>
		<comments>http://www.morph3ous.net/2006/08/25/hugg-the-american-voting-system-hacked/#comments</comments>
		<pubDate>Sat, 26 Aug 2006 03:22:44 +0000</pubDate>
		<dc:creator>Brian</dc:creator>
				<category><![CDATA[Philosophy]]></category>
		<category><![CDATA[Politics]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>

		<guid isPermaLink="false">http://www.morph3ous.net/2006/08/25/hugg-the-american-voting-system-hacked/</guid>
		<description><![CDATA[Found this from:Hugg / The American Voting System: HACKED Watch this video, and I think that you too will be convinced that we need to have a paper trail in our elections. Not even just a paper trail that is printed out at the end of the day at each polling station. We need to have each voting machine print our vote in front of our very own eyes. We then need to be able to confirm that the information is indeed correct, and then place it in a locked ballot box. I remember the first time that I used one of those machines I remarked to one of my friends how I did not trust them. This is coming from someone who has been working in IT all my life. Now my friend knows that I was not just being paranoid!]]></description>
		<wfw:commentRss>http://www.morph3ous.net/2006/08/25/hugg-the-american-voting-system-hacked/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>CNET News.com: Protecting yourself from search engines</title>
		<link>http://www.morph3ous.net/2006/08/09/cnet-newscom-protecting-yourself-from-search-engines/</link>
		<comments>http://www.morph3ous.net/2006/08/09/cnet-newscom-protecting-yourself-from-search-engines/#comments</comments>
		<pubDate>Wed, 09 Aug 2006 14:29:19 +0000</pubDate>
		<dc:creator>Brian</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>

		<guid isPermaLink="false">http://www.morph3ous.net/2006/08/09/cnet-newscom-protecting-yourself-from-search-engines/</guid>
		<description><![CDATA[CNET News.com has written an article about protecting yourself from search engines. The piece is a fluff piece; however, does have some useful tips. I recommend that you read it. This comes after AOL released the search records of users to the public. FAQ: Protecting yourself from search engines &#124; CNET News.com: AOLs publication of the search histories of more than 650,000 of its users should reinforce an important point: What you type in online may not be as private as you think. Search engines place a multibillion-dollar infrastructure at the hands of any random user who stops by their Web site. The price you pay, however, is that the company may hold on to your search queries&#8211;which can provide a glimpse into your life&#8211;forever. To offer some suggestions about preserving your privacy while using search engines, CNET News.com has prepared the following list of frequently asked questions.]]></description>
		<wfw:commentRss>http://www.morph3ous.net/2006/08/09/cnet-newscom-protecting-yourself-from-search-engines/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>JitterBugs could turn your keyboard against you</title>
		<link>http://www.morph3ous.net/2006/08/08/jitterbugs-could-turn-your-keyboard-against-you/</link>
		<comments>http://www.morph3ous.net/2006/08/08/jitterbugs-could-turn-your-keyboard-against-you/#comments</comments>
		<pubDate>Tue, 08 Aug 2006 16:16:53 +0000</pubDate>
		<dc:creator>Brian</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>

		<guid isPermaLink="false">http://www.morph3ous.net/2006/08/08/jitterbugs-could-turn-your-keyboard-against-you/</guid>
		<description><![CDATA[JitterBugs could turn your keyboard against you: JitterBug devices are conceptually similar to keystroke loggers, such as the one famously used by the FBI to gather evidence against bookmaker Nicodemo Scarfo Jr. Unlike keystroke loggers, which would have to be physically installed into a subject&#8217;s computer and then retrieved, a keyboard JitterBug only needs to be installed. The device itself sends the collected information through any interactive software application where there is a correlation between keyboard activity and network activity, such as instant messaging, SSH or remote desktop applications. The bug leaks the stolen data through short, virtually unnoticeable delays added every time the user presses a key. Anytime the user surfs the web, sends an e-mail or instant messages someone, an implanted JitterBug could be timed to open a covert jitter channel to send stolen data. According to Shah, a JitterBug could not log and transmit every touch of the key due to limited storage space on the device, but it could be primed to record a keystroke with a particular trigger.]]></description>
		<wfw:commentRss>http://www.morph3ous.net/2006/08/08/jitterbugs-could-turn-your-keyboard-against-you/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>AOL Proudly Releases Massive Amounts of Private Data</title>
		<link>http://www.morph3ous.net/2006/08/07/techcrunch-%c2%bb-blog-archive-%c2%bb-aol-proudly-releases-massive-amounts-of-private-data/</link>
		<comments>http://www.morph3ous.net/2006/08/07/techcrunch-%c2%bb-blog-archive-%c2%bb-aol-proudly-releases-massive-amounts-of-private-data/#comments</comments>
		<pubDate>Mon, 07 Aug 2006 13:21:09 +0000</pubDate>
		<dc:creator>Brian</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>

		<guid isPermaLink="false">http://www.morph3ous.net/2006/08/07/techcrunch-%c2%bb-blog-archive-%c2%bb-aol-proudly-releases-massive-amounts-of-private-data/</guid>
		<description><![CDATA[Techcrunch » Blog Archive » AOL Proudly Releases Massive Amounts of Private Data The utter stupidity of this is staggering. AOL has released very private data about its users without their permission. While the AOL username has been changed to a random ID number, the abilitiy to analyze all searches by a single user will often lead people to easily determine who the user is, and what they are up to. The data includes personal names, addresses, social security numbers and everything else someone might type into a search box. Update: AOL has taken the data down]]></description>
		<wfw:commentRss>http://www.morph3ous.net/2006/08/07/techcrunch-%c2%bb-blog-archive-%c2%bb-aol-proudly-releases-massive-amounts-of-private-data/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Thought your lock was safe? &#8211; Bump Keying</title>
		<link>http://www.morph3ous.net/2006/08/06/thought-your-lock-was-safe-bump-keying/</link>
		<comments>http://www.morph3ous.net/2006/08/06/thought-your-lock-was-safe-bump-keying/#comments</comments>
		<pubDate>Sun, 06 Aug 2006 14:30:27 +0000</pubDate>
		<dc:creator>Brian</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.morph3ous.net/2006/08/06/thought-your-lock-was-safe-bump-keying/</guid>
		<description><![CDATA[Here is a particularly scary development. This video shows that taking existing keys and making a few slight alterations will allow you to open other people&#8217;s locks. The special key is called a bump key. Lock pickers do not particularly like the idea because it requires no skill. I wonder how to get safer locks.]]></description>
		<wfw:commentRss>http://www.morph3ous.net/2006/08/06/thought-your-lock-was-safe-bump-keying/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Ed Foster&#8217;s Gripelog &#124;&#124; WGA and Activation Failures Don&#8217;t Faze Redmond</title>
		<link>http://www.morph3ous.net/2006/07/28/ed-fosters-gripelog-wga-and-activation-failures-dont-faze-redmond/</link>
		<comments>http://www.morph3ous.net/2006/07/28/ed-fosters-gripelog-wga-and-activation-failures-dont-faze-redmond/#comments</comments>
		<pubDate>Sat, 29 Jul 2006 00:45:08 +0000</pubDate>
		<dc:creator>Brian</dc:creator>
				<category><![CDATA[Politics]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>

		<guid isPermaLink="false">http://www.morph3ous.net/2006/07/28/ed-fosters-gripelog-wga-and-activation-failures-dont-faze-redmond/</guid>
		<description><![CDATA[This article is a must-read if you want to keep abreast of Microsoft&#8217;s dark side. Ed Foster&#8217;s Gripelog &#124;&#124; WGA and Activation Failures Don&#8217;t Faze Redmond describes the experience a business had trying to get their computers back up after Windows Genuine Advantage (WGA) improperly identified them as using unlicensed software. From Ed Foster&#8217;s Gripelog &#124;&#124; WGA and Activation Failures Don&#8217;t Faze Redmond: With neither Microsoft or Dell willing to help in a situation where the reader&#8217;s company clearly had valid licenses for XP, the reader had little choice. &#8220;So, here we are, working weekend hours and all, reinstalling XP on machines that shouldn&#8217;t have to be reinstalled,&#8221; the reader wrote. &#8220;And of course, Microsoft makes you call to validate Windows XP. The first machine we try, their outsourced validation firm agrees that the Product Key is valid &#8211; but won&#8217;t issue an Activation Code. There&#8217;s a problem that they can&#8217;t figure out. That, they say, requires Customer Support. Customer Support agrees that the code is valid, and can&#8217;t say why it might not work, and we need to speak with Technical Support. Unfortunately, Technical Support is closed. Could we perhaps call back on Monday?&#8221; As the reader and staff [...]]]></description>
		<wfw:commentRss>http://www.morph3ous.net/2006/07/28/ed-fosters-gripelog-wga-and-activation-failures-dont-faze-redmond/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>sshdfilter: Stop SSH brute force attacks</title>
		<link>http://www.morph3ous.net/2006/07/19/stop-ssh-brute-force-attacks/</link>
		<comments>http://www.morph3ous.net/2006/07/19/stop-ssh-brute-force-attacks/#comments</comments>
		<pubDate>Thu, 20 Jul 2006 03:56:55 +0000</pubDate>
		<dc:creator>Brian</dc:creator>
				<category><![CDATA[Internet]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Technology]]></category>

		<guid isPermaLink="false">http://www.morph3ous.net/2006/07/19/stop-ssh-brute-force-attacks/</guid>
		<description><![CDATA[One of my clients recently complained that one of the servers was a bit slow at times. Upon checking the logs I found a string of attacks against that server. People from Russia, China, Bolivia, the US and many other countries were running scripts to attempt to hack into the server. I investigated many potential solutions. Then I came up with a plan. This method seems to be making it much more inconvenient to try to guess at the passwords. This is what I did. The most important step is to audit which accounts can login through ssh. Only allow those who should have access to the system login. There is less of a chance that someone has a weak password, and there are less potential points of entry. This particular server was locked down from the start, and there are very few accounts that can login. I then edited the /etc/ssh/sshd_config configuration file and disabled the SSH1 protocol. Change Protocol 1,2 to Protocol 2. There are apparently some security problems with SSH1. I did not dig into the details. Please add a comment to this post if you know why it is insecure. I also disabled root logins by [...]]]></description>
		<wfw:commentRss>http://www.morph3ous.net/2006/07/19/stop-ssh-brute-force-attacks/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

