News for hackers. Stuff that matters.

A comment on Targeted MitM attacks using information leakage in SSH clients [pdf]. Parent comment

Re:Targeted MitM attacks using information leakage in SSH cl... by asveikau on Saturday July 04, 2020 @02:18PM (#23733960)
Very surprised to see a bug get patched in putty but says OpenSSH won't fix. Anyone reading this with the kind of background who can comment on that?
[ Parent | on HN ]
Re:Targeted MitM attacks using information leakage in SSH cl... by Xylakant on Saturday July 04, 2020 @04:10PM (#23734606)
If I read the report correctly, this is a protocol level issue. The report lists a potential client side fix, but it’s not without problems and includes the following sentence regarding openssh: “ The developers of OpenSSH are not planning to change the behavior of OpenSSH regarding this issue, because of the aforementioned drawbacks. ”
[ Parent | on HN ]