everyone is overreacting to CVEs like usual

if you're doing rsync over SSH, they'd have to have compromised the server key to not trigger the fingerprint/impersonation warning

If the server is compromised by an attacker, you have much larger problems.

Secure both ends. Use a secure network transport that can't be MITM'd. These problems don't matter then.

RT: https://mastodon.social/users/nixCraft/statuses/113833699519818054