boem@lemmy.world to Technology@lemmy.worldEnglish · 8 months agoIn a first, cryptographic keys protecting SSH connections stolen in new attackarstechnica.comexternal-linkmessage-square6fedilinkarrow-up1198arrow-down14cross-posted to: netsec@lemmy.worldsaugumas@group.ltcybersecurity@infosec.pubtech@pawb.social
arrow-up1194arrow-down1external-linkIn a first, cryptographic keys protecting SSH connections stolen in new attackarstechnica.comboem@lemmy.world to Technology@lemmy.worldEnglish · 8 months agomessage-square6fedilinkcross-posted to: netsec@lemmy.worldsaugumas@group.ltcybersecurity@infosec.pubtech@pawb.social
minus-squarelemmyvore@feddit.nllinkfedilinkEnglisharrow-up80·8 months agoOnly affects RSA keys, and then only 1 in a million keys are vulnerable. So this is mostly of academic (rather than practical) interest, but nevertheless it will lead to further hardening of the SSH protocol which is nice.
minus-squareBorgDrone@lemmy.onelinkfedilinkEnglisharrow-up55arrow-down2·8 months agoOne in a million is next Tuesday
minus-squarePlasticExistence@lemmy.worldlinkfedilinkEnglisharrow-up24·8 months agoIt also appears to only affect non-OpenSSH secure shell implementations.
minus-squaredeafboy@lemmy.worldlinkfedilinkEnglisharrow-up1·8 months agoSecurity of a sufficiently long RSA key was the one true constant in my life. Poof… There it goes! Once attackers have possession of the secret key through passive observation of traffic, they can mount an active Mallory-in-the-middle Mallory in the middle would be a sick punkrock band name though.
Only affects RSA keys, and then only 1 in a million keys are vulnerable. So this is mostly of academic (rather than practical) interest, but nevertheless it will lead to further hardening of the SSH protocol which is nice.
One in a million is next Tuesday
It also appears to only affect non-OpenSSH secure shell implementations.
Oh, so like 3 users
Security of a sufficiently long RSA key was the one true constant in my life. Poof… There it goes!
Mallory in the middle would be a sick punkrock band name though.