3 ms·
Copy of the tweet for preservation: Damien Miller @damienmiller Looks like T-Mobile hasn't updated the OpenSSH installation (and thus probably neither OS) sinc
by mjevans 5y ago
Copy of the tweet for preservation:
Damien Miller
@damienmiller
Looks like T-Mobile hasn't updated the OpenSSH installation (and thus probably neither OS) since 2014. SHA256 has been the default hostkey fingerprint since the openssh 6.8 release in 2015
Retweeted:
https://twitter.com/Jeremy_Kirk/status/1427144723731402756 https://twitter.com/Jeremy_Kirk/status/1427144723731402756
Jeremy Kirk
@Jeremy_Kirk
The person who claims to have compromised T-Mobile says the company misconfigured a gateway GPRS support node that was apparently used for testing. It was exposed to the internet. That allowed the person to eventually pivot to the LAN. Proof screenshot supplied.