News for hackers. Stuff that matters.

A comment on Signing .jars is not worth the effort. Parent comment

Re:Signing .jars is not worth the effort by DangitBobby on Sunday July 26, 2020 @03:37PM (#23959572)
Maybe I'm being naive here, but if you spin up a new instance and immediately SSH into that via the given public IP, isn't the likelihood that someone could have meaningfully injected themselves between you and that previously unknown IP address vanishingly small?
[ Parent | on HN ]
Re:Signing .jars is not worth the effort by lysium on Sunday July 26, 2020 @04:28PM (#23959941)
Just monitor and mitm all ssh connections. It’s really easy.
[ Parent | on HN ]
Re:Signing .jars is not worth the effort by MaxBarraclough on Sunday July 26, 2020 @05:17PM (#23960262)
Right. The attacker might have compromised my local network, for instance.
[ Parent | on HN ]