mattw.fn_blog()

Anyone using PuTTY (especially over wireless) should upgrade to 0.56 immediately.

From the maintainer:

2004-10-26 ANOTHER SECURITY HOLE, fixed in PuTTY 0.56

PuTTY 0.56, released today, fixes a serious security hole which can allow a server to execute code of its choice on a PuTTY client connecting to it. In SSH2, the attack can be performed before host key verification, meaning that even if you trust the server you think you are connecting to, a different machine could be impersonating it and could launch the attack before you could tell the difference. We recommend everybody upgrade to 0.56 as soon as possible.

That’s two really bad holes in three months. I’d like to apologise to all our users for the inconvenience.

Rob has whipped up some tools to make your CS:S server on linux a bit nicer. Those familiar with CS and adminmod will recognize the commands and the need for them. There is of course, a cs.seattlewireless.net server running 24/7 with all the latest bits, so the second voting gets enabled, you too can have the privilege of kicking that spawn camping TK’er.

Yahoo has a story on $100 Cheesesteaks. I don’t think I’ll be buying any.