News for hackers. Stuff that matters.

A comment on Keystroke timing obfuscation added to SSH(1). Parent comment

Re:Keystroke timing obfuscation added to SSH(1) by scintill76 on Tuesday August 29, 2023 @10:24AM (#37308416)
IIRC there is at least one paper, maybe around 2005, where they were able to determine what was being typed in an encrypted ssh session, using packet timings correlated to collected human typing statistics. Looks like this adds noise to prevent that.
[ Parent | on HN ]
Re:Keystroke timing obfuscation added to SSH(1) by dingaling on Tuesday August 29, 2023 @10:42AM (#37308677)
Alternatively, use the SSH compression option that works on blocks of data
[ Parent | on HN ]