Re:Targeted MitM attacks using information leakage in SSH cl...
by Xylakant on Saturday July 04, 2020 @12:55PM
(#23733475)
This bug actually affects OpenSSH, too. See https://www.fzi.de/en/news/news/detail-en/artikel/fsa-2020-2...
[ Parent
| on HN ]
Re:Targeted MitM attacks using information leakage in SSH cl...
by asveikau on Saturday July 04, 2020 @02:18PM
(#23733960)
Very surprised to see a bug get patched in putty but says OpenSSH won't fix. Anyone reading this with the kind of background who can comment on that?
Re:Targeted MitM attacks using information leakage in SSH cl...
by Xylakant on Saturday July 04, 2020 @04:10PM
(#23734606)
If I read the report correctly, this is a protocol level issue. The report lists a potential client side fix, but it’s not without
problems and includes the following sentence regarding openssh: “ The developers of OpenSSH are not planning to change the behavior of OpenSSH regarding this issue, because of the aforementioned drawbacks. ”