3 ms·
"adversary-in-the middle, also known as man-in-the-middle" Hoo boy.
by unethical_ban 3y ago
"adversary-in-the middle, also known as man-in-the-middle"
Hoo boy.
- markhahn 3y agoright, so if you already have a huge security problem, there are a narrow set of cases where this might allow fairly minor weakening of your ssh sessions (if you don't perform the straightforward mitigation).
- PantaloonFlames 3y ago> if you already have a huge security problem, Maybe? If you include "use a third-party hoster" into the idea of "have a huge security problem". From a different comment (https://news.ycombinator.com/item?id=38710214 https://news.ycombinator.com/item?id=38710214) , two months ago an organization found their Hetzner server was MITMed https://news.ycombinator.com/item?id=37955264 https://news.ycombinator.com/item?id=37955264 . The source article says "We believe this is lawful interception Hetzner and Linode were forced to setup." tl;dr: People's assumptions about SSH enabling a secure tunnel are not necessarily valid.
- henriquez 3y agoNewspeak 101: it’s sexist to assume that a malicious actor is male. Women can be malicious too! Other acceptable terms are: Woman-in-the-Middle and Man-or-Woman-or-Non-binary-In-the-Middle. Add that to your allow list.
- unethical_ban 3y agoYeah that's what I was hoo-boying about. The subtle shift in term.
- cratermoon 3y agoAlice, Bob, Eve, Mallory, Trent, and so on. https://en.wikipedia.org/wiki/Alice_and_Bob#Cast_of_characters https://en.wikipedia.org/wiki/Alice_and_Bob#Cast_of_characte...