Jonathan Arbib

Read the posts on this forum

Then visit the site linked at the bottom of the page, or click here

That looks like phishing to me… Very simple attempt…

But could be effective if indeed it IS phishing…

To test it out, someone could perhaps create a “super” jailed ssh account on a system to perhaps see if someone attempts to login using those parameters… Someone wants to attempt it, and report back?

I am readapting this tutorial from here for reference purposes only :-)
Update: Thanks Mike G for typo/fix/correction

local$ ssh-keygen -t dsa
local$ scp ~/.ssh/id_dsa.pub remote:~/
local$ ssh username@remote
remote$ cat ~/id_dsa.pub >> ~/.ssh/authorized_keys
remote$ chmod 644 ~/.ssh/authorized_keys
remote$ exit
local$ ssh username@remote

Now instead of the normal password you should be asked for the password you entered for your dsa key. This isn’t passwordless yet but shows that ssh is using the key

Note: Leave Key password blank to have passwordless authentication

Fixes for possible problems:

chmod 0600 authorized_keys
ln -s authorized_keys2 authorized_keys (or viceversa)