terrapin-attack.com

s38b35M5 , 7 months ago to linux in Terrapin Attack – SSH vulnerability

I can’t believe its already been almost thirty years since SSH was created! Time to further harden your servers and clients by removing (now) insecure KEX algos.

rammer , 7 months ago

Please note that if you do this then some older devices will stop working. (cough Cisco cough)

callcc , 7 months ago to linux in Terrapin Attack – SSH vulnerability

That doesn’t look good :(

JoeKrogan , 7 months ago to linux in Terrapin Attack – SSH vulnerability

Thanks for sharing OP.

Grass , 7 months ago to linux in Terrapin Attack – SSH vulnerability

I was worried I would have to ask for a tl;dr for dummies like I’m 5, but everything is categorized nicely under questions one may have on the topic. It’s been a while since I’ve been able to get meaningful information from a website without a huge commitment.

JoeKrogan , 7 months ago to linux in Terrapin Attack – SSH vulnerability

Looks like this addressed in openssh 9.6.

MonkderZweite , 7 months ago to linux in Terrapin Attack – SSH vulnerability

So only OpenSSH?

Unsafe , 7 months ago to linux in Terrapin Attack – SSH vulnerability

I use Dropbear BTW