Conversation

Notices

1. Embed this notice
   menherahair (menherahair@eientei.org)'s status on Friday, 17-Nov-2023 00:04:06 JST menherahair
   > New SSH Vulnerability
   uh oh
   • Pleroma-tan likes this.
   • Embed this notice
     Pleroma-tan (kirby@lab.nyanide.com)'s status on Friday, 17-Nov-2023 00:04:16 JST Pleroma-tan

     in reply to
     @menherahair update
      repeated this.
   • Embed this notice
     Pleroma-tan (kirby@lab.nyanide.com)'s status on Friday, 17-Nov-2023 00:12:13 JST Pleroma-tan

     in reply to
     @menherahair hoo boy
     
     Gonna wait for a package update
   • Embed this notice
     menherahair (menherahair@eientei.org)'s status on Friday, 17-Nov-2023 00:12:15 JST menherahair

     in reply to

     • Pleroma-tan
     @kirby
     https://www.schneier.com/blog/archives/2023/11/new-ssh-vulnerability.html
     some guy claims it's literally nothing
     > Since some of the affected implementations still support SSHv1 they’ve (a) got bigger problems than a one-in-a-million fault and (b) probably haven’t been updated since Windows 98 was state of the art. So it’s not “New SSH attack” it’s “Ancient never-updated SSH implementations still vulnerable to equally ancient attack”.
      likes this.
   • Embed this notice
     Pleroma-tan (kirby@lab.nyanide.com)'s status on Friday, 17-Nov-2023 00:14:32 JST Pleroma-tan

     in reply to

     • Pleroma-tan
     @menherahair nvm apparently WONTFIX because this doesn't exist in openssh
   • Embed this notice
     menherahair (menherahair@eientei.org)'s status on Friday, 17-Nov-2023 00:15:18 JST menherahair

     in reply to

     • Pleroma-tan
     @kirby yes you have to take nyanide down because (((research paper))) says one in a million computers has bugs
     Pleroma-tan likes this.
   • Embed this notice
     Pleroma-tan (kirby@lab.nyanide.com)'s status on Friday, 17-Nov-2023 00:15:26 JST Pleroma-tan

     in reply to
     @menherahair chances are uses rsa
     
     Either way it's a non issue
   • Embed this notice
     Pleroma-tan (kirby@lab.nyanide.com)'s status on Friday, 17-Nov-2023 00:24:59 JST Pleroma-tan

     in reply to
     @menherahair I'm just a dum dun sometimes.
   • Embed this notice
     menherahair (menherahair@eientei.org)'s status on Friday, 17-Nov-2023 00:25:01 JST menherahair

     in reply to

     • Pleroma-tan
     @kirby are you sure you're not using the zyxel ssh server
     Pleroma-tan repeated this.
   • Embed this notice
     Pleroma-tan (kirby@lab.nyanide.com)'s status on Friday, 17-Nov-2023 00:25:15 JST Pleroma-tan

     in reply to

     • Pleroma-tan
     @menherahair dum*
     
     :cirnoShrug:
   • Embed this notice
     menherahair (menherahair@eientei.org)'s status on Friday, 17-Nov-2023 00:26:02 JST menherahair

     in reply to

     • Pleroma-tan
     @kirby douum
     Pleroma-tan likes this.
   • Embed this notice
      (mint@ryona.agency)'s status on Friday, 17-Nov-2023 00:28:47 JST 

     in reply to

     • Pleroma-tan
     @kirby @menherahair Just use telnet. SSH is bloat and considered harmful.
     ✙ dcc :pedomustdie: :phear_slackware: and Pleroma-tan like this.
   • Embed this notice
     Pleroma-tan (kirby@lab.nyanide.com)'s status on Friday, 17-Nov-2023 00:57:23 JST Pleroma-tan

     in reply to

     • 
     @mint @menherahair :insane:
   • Embed this notice
     Yukkuri (iamtakingiteasy@eientei.org)'s status on Friday, 17-Nov-2023 00:57:33 JST Yukkuri

     in reply to

     • Pleroma-tan
     @menherahair @kirby At least they made nice modems.
     Pleroma-tan likes this.
   • Embed this notice
     Kirino Kousaka (kirino@seal.cafe)'s status on Friday, 17-Nov-2023 01:14:38 JST Kirino Kousaka

     in reply to

     • 
     • Pleroma-tan

     Can you play the first star wars movie in ssh?

     Pleroma-tan likes this.
   • Embed this notice
      (mint@ryona.agency)'s status on Friday, 17-Nov-2023 04:07:41 JST 

     in reply to

     • Kirino Kousaka
     • Pleroma-tan
     @Kirino @menherahair @kirby >ssh: connect to host towel.blinkenlights.nl port 22: Connection refused
     Doesn't seem so.
   • Embed this notice
     ✙ dcc :pedomustdie: :phear_slackware: (dcc@annihilation.social)'s status on Friday, 17-Nov-2023 04:08:56 JST ✙ dcc :pedomustdie: :phear_slackware:

     in reply to

     • 
     • Kirino Kousaka
     • Pleroma-tan
     @mint @menherahair @kirby @Kirino Telnet + openvpn is all you need (you should only make ssh accessible on the local net anyways)
   • Embed this notice
      (mint@ryona.agency)'s status on Friday, 17-Nov-2023 04:12:52 JST 

     in reply to

     • 
     • Kirino Kousaka
     • Pleroma-tan
     @Kirino @kirby @menherahair I wonder if Sten ever received his hug.
     Screenshot_20231116_221106.png
   • Embed this notice
     Kirino Kousaka (kirino@seal.cafe)'s status on Friday, 17-Nov-2023 04:16:58 JST Kirino Kousaka

     in reply to

     • 
     • Pleroma-tan

     I hope Sten is doing well, maybe he’s on Fedi :O

      likes this.
   • Embed this notice
     menherahair (menherahair@eientei.org)'s status on Friday, 17-Nov-2023 04:17:18 JST menherahair

     in reply to

     • 
     • ✙ dcc :pedomustdie: :phear_slackware:
     • Kirino Kousaka
     • Pleroma-tan
     @dcc @kirby @mint @Kirino
     > you should only make ssh accessible on the local net anyways
     if this keeps up gonna start believing this unironically
      and ✙ dcc :pedomustdie: :phear_slackware: like this.
   • Embed this notice
      (mint@ryona.agency)'s status on Friday, 17-Nov-2023 04:17:40 JST 

     in reply to

     • ✙ dcc :pedomustdie: :phear_slackware:
     • Kirino Kousaka
     • Pleroma-tan
     @menherahair @dcc @kirby @Kirino Move it onto random port and set up port knocking if you're extra paranoid.
   • Embed this notice
     ✙ dcc :pedomustdie: :phear_slackware: (dcc@annihilation.social)'s status on Friday, 17-Nov-2023 05:05:33 JST ✙ dcc :pedomustdie: :phear_slackware:

     in reply to

     • 
     • Kirino Kousaka
     • Pleroma-tan
     @menherahair @kirby @mint @Kirino Not everything needs to be exposed to the outside
     Pleroma-tan repeated this.
   • Embed this notice
     Pleroma-tan (kirby@lab.nyanide.com)'s status on Friday, 17-Nov-2023 05:07:21 JST Pleroma-tan

     in reply to

     • 
     • ✙ dcc :pedomustdie: :phear_slackware:
     • Kirino Kousaka
     @dcc @menherahair @mint @Kirino I don't like keeping my clothes on outside though.
   • Embed this notice
     ✙ dcc :pedomustdie: :phear_slackware: (dcc@annihilation.social)'s status on Friday, 17-Nov-2023 05:30:18 JST ✙ dcc :pedomustdie: :phear_slackware:

     in reply to

     • 
     • ✙ dcc :pedomustdie: :phear_slackware:
     • Kirino Kousaka
     • Pleroma-tan
     @menherahair @Kirino @kirby @mint O i read that wrong :alex_lol:
     Pleroma-tan likes this.
   • Embed this notice
     NEETzsche (neetzsche@iddqd.social)'s status on Friday, 17-Nov-2023 06:20:17 JST NEETzsche

     in reply to

     • 
     • ✙ dcc :pedomustdie: :phear_slackware:
     • Kirino Kousaka
     • Pleroma-tan

     Most secure WAN configuration

      and ✙ dcc :pedomustdie: :phear_slackware: like this.