SSH ensures security from IP to IP, not necessarily from Cell phone to IP.  So your 'endpoint' is the IP address on the cell providers systems.  The level of explicit security in this case is pretty low and would depend on transport security inherit in the cell network protocol.

  -jmz

On Tue, Nov 25, 2008 at 2:48 PM, Jon M. Hanson <jon@the-hansons-az.net> wrote:
SSH is secured at your endpoint specifically because you don't trust the network. Even if someone was able to intercept the cellular data (which is encrypted as well, at least for GSM) they still wouldn't be able to decypher your SSH session.

Sent from my iPhone

On Nov 25, 2008, at 2:38 PM, "Joshua Zeidner" <jjzeidner@gmail.com> wrote:


 Lisa,

  I wonder if the data transport (over cell network) is secured...  can a sophisticated cell phone eavesdropper snoop on my ssh session?

 -jmz


On Tue, Nov 25, 2008 at 11:07 AM, Lisa Kachold <lisakachold@obnosis.com> wrote:
Check out midpssh - works on BlackBerry, and most PDA's - since it's compiled for various ARM and other phone devices.

http://www.xk72.com/midpssh/

Point your phone browser to install:

http://xk72.com/wap


Security Disclaimer:
Remember to limit your server SSH access points (where possible) through ACL [iptables] by IP [check your phone settings for IP address], use strong passwords, and deploy daemon wrappers like SSHIT or SSHUTOUT [to protect against brute force and dictionary attacks], enable strong logging and log servers [so the logs can't be trivially edited] and alternately run on a unique port (not 2222 [everyone uses 2222]) if you MUST leave SSH open to PSTN/Internet gateways.

www.Obnosis.com |  http://en.wiktionary.org/wiki/Citations:obnosis | http://www.urbandictionary.com/define.php?term=obnosis (503)754-4452
Catch the January PLUG HackFest!   Kristy Westphal, CSO for the Arizona Department of Economic Security will provide a one hour presentation on forensics.



Get more done, have more fun, and stay more connected with Windows Mobile®. See how.

---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss

---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss

---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss