8 ms·
right, so if you already have a huge security problem, there are a narrow set of cases where this might allow fairly minor weakening of your ssh sessions (if yo
by markhahn 3y ago
right, so if you already have a huge security problem, there are a narrow set of cases where this might allow fairly minor weakening of your ssh sessions (if you don't perform the straightforward mitigation).
- PantaloonFlames 3y ago> if you already have a huge security problem, Maybe? If you include "use a third-party hoster" into the idea of "have a huge security problem". From a different comment (https://news.ycombinator.com/item?id=38710214 https://news.ycombinator.com/item?id=38710214) , two months ago an organization found their Hetzner server was MITMed https://news.ycombinator.com/item?id=37955264 https://news.ycombinator.com/item?id=37955264 . The source article says "We believe this is lawful interception Hetzner and Linode were forced to setup." tl;dr: People's assumptions about SSH enabling a secure tunnel are not necessarily valid.