News for hackers. Stuff that matters.
Re:35-year-old vulnerability discovered in scp by m45t3r on Tuesday January 15, 2019 @05:05PM (#18915931)
SSH saves the host identification in .known_hosts file. So after the first connection (that asks you if you know this key, and sure, nobody verifies it) you known for sure that this is the server that you want to connect.

If after all that you receive a message an error from SSH that the host key identification changed, you didn't change this key yourself (or your team) and you still blindly ignore this issue (since it is not easy to bypass either, there is no flag, for example), this is not an UI issue and you're responsible for your actions.

There are no comments on this comment yet.