4 ms·
No -- unless you have exclusive physical control of the machine you'll always be vulnerable. A malicious VPS provider has access to the machine's RAM, which me
by clarkm 13y ago
No -- unless you have exclusive physical control of the machine you'll always be vulnerable.
A malicious VPS provider has access to the machine's RAM, which means they can do almost anything. For example, they could extract your SSH private key and silently decrypt all your traffic.
Is such an attack easy? No. But I could compile sshd with debug symbols and it would be. Even without them it's still possible, just very difficult. Though nothing a skilled employee of a nation-state couldn't do.
- e12e 13y agoAs far as I know, SSH v2 offers perfect forward secrecy, so the attacker would have to read the session key from ram, not the private key (the private key would allow the attacker to do MITM, though).