News for hackers. Stuff that matters.
Re:Important SSH patch coming soon by chippy on Thursday January 14, 2016 @11:38AM (#10902418)
What does "UseRoaming" do?

http://linux.die.net/man/5/ssh_config contains no mention of it, and DDG hits a reddit thread of 2014 asking the same thing (and giving an indication that it was also subject to another vuln) and they stated that it was added undocumented but "it does nothing yet"...

I found a commit message saying "Request roaming to be enabled if UseRoaming is true and the server supports it." So in addition, what is "request roaming"?

Re:Important SSH patch coming soon by gravypod on Thursday January 14, 2016 @11:41AM (#10902442)
It allows re-connection to an SSH session after you are dropped from what I understand.

This is for people who are on cell connections/spotty internet.

Re:Important SSH patch coming soon by masklinn on Thursday January 14, 2016 @11:48AM (#10902516)
That was the idea, but it needs server support and the server side was never implemented in OpenSSH.
Re:Important SSH patch coming soon by nickodell on Thursday January 14, 2016 @12:18PM (#10902732)
Perhaps roaming makes some kind of man-in-the-middle attack possible?
Re:Important SSH patch coming soon by masklinn on Thursday January 14, 2016 @01:05PM (#10903104)
The roaming thing occurs post negotiation, so the connection is already fully encrypted.