3 ms·
So the real question is, can a MITM intercept connections to boxen you frequent to exploit this? Or is it limited to connecting to hostile honeypots?
by kardos 11y ago
So the real question is, can a MITM intercept connections to boxen you frequent to exploit this? Or is it limited to connecting to hostile honeypots?
- ryanlol 11y agoTested quickly, doesn't look like it. Host key checking happens before the roaming stuff. That doesn't mean it's limited to hostile honeypots, if it turns out that this is easily exploitable it'll be a complete shitstorm with sysadmins getting owned left and right with rootkits implementing automatic exploitation.
- deleted 11y ago[deleted]
- DrRobinson 11y agoApparently not possible with MITM. "The authentication of the server host key prevents exploitation by a man-in-the-middle, so this information leak is restricted to connections to malicious or compromised servers." https://lists.mindrot.org/pipermail/openssh-unix-dev/2016-January/034680.html https://lists.mindrot.org/pipermail/openssh-unix-dev/2016-Ja...
- kardos 11y ago... and those that you haven't established TOFU with yet
- the_mitsuhiko 11y agoWhat is "boxen"?
- kardos 11y agoPlural of UNIX (or equivalent) system [1] [1] http://www.catb.org/jargon/html/B/boxen.html http://www.catb.org/jargon/html/B/boxen.html