a) Don’t use MD5. SHA512 is a good idea.

b) The Kaminsky bug presentation is at http://www.doxpara.com/DMK_BO2K8.ppt various more information on http://doxpara.com/

c) (old) Update OpenSSH *and* OpenSSL certificates made on debian boxes.