News for hackers. Stuff that matters.
Re:Targeted MitM attacks using information leakage in SSH cl... by Xylakant on Saturday July 04, 2020 @12:55PM (#23733475)
This bug actually affects OpenSSH, too. See https://www.fzi.de/en/news/news/detail-en/artikel/fsa-2020-2...
Re:Targeted MitM attacks using information leakage in SSH cl... by asveikau on Saturday July 04, 2020 @02:18PM (#23733960)
Very surprised to see a bug get patched in putty but says OpenSSH won't fix. Anyone reading this with the kind of background who can comment on that?
Re:Targeted MitM attacks using information leakage in SSH cl... by Xylakant on Saturday July 04, 2020 @04:10PM (#23734606)
If I read the report correctly, this is a protocol level issue. The report lists a potential client side fix, but it’s not without problems and includes the following sentence regarding openssh: “ The developers of OpenSSH are not planning to change the behavior of OpenSSH regarding this issue, because of the aforementioned drawbacks. ”