4 ms·

Yea I was fairly confused about that announcement as I couldn't find anything damning in the released docs about SSH. Do you have a reference to a specific docu

by shazow 12y ago

Yea I was fairly confused about that announcement as I couldn't find anything damning in the released docs about SSH. Do you have a reference to a specific document/slide?

doctorshady 12y ago
Spiegel briefly touched on it too; The NSA also has a program with which it claims it can sometimes decrypt the Secure Shell protocol (SSH). This is typically used by systems administrators to log into employees' computers remotely, largely for use in the infrastructure of businesses, core Internet routers and other similarly important systems. The NSA combines the data collected in this manner with other information to leverage access to important systems of interest. (source: http://www.spiegel.de/international/germany/inside-the-nsa-s-war-on-internet-security-a-1010361.html http://www.spiegel.de/international/germany/inside-the-nsa-s... ) Still incredibly vague. If they're archiving all traffic in hopes of decrypting it some day though, it's safe to say we should treat anything on the internet as the shiny side of one way glass.
boracay 12y ago
My guess is that, at least, some router ssh implementation is insecure, possibly not by accident. From the slides: Page 19: "SSH [...] Potentially recover user names and passwords" Page 36: "SSH - often have router configurations and user credentials [...]" http://www.spiegel.de/media/media-35515.pdf http://www.spiegel.de/media/media-35515.pdf
- shazow 12y ago
  Right, I saw that also. Is it referring to routers that happen to run SSH with default root/admin passwords or something? I couldn't find anything more concrete.
marcosdumay 12y ago
The slides say they can sometimes decrypt SSH sessions (with ssmintm?) and catpute usernames and passwords from SSH servers. The only unexpected thing I could see there was the lack of anything I didn't know how to do...
- shazow 12y ago
  Yea, sshmitm makes sense also, but I wouldn't consider that a 0day exactly. :P

by shazow 12y ago

Yea I was fairly confused about that announcement as I couldn't find anything damning in the released docs about SSH. Do you have a reference to a specific document/slide?

doctorshady 12y ago

Spiegel briefly touched on it too; The NSA also has a program with which it claims it can sometimes decrypt the Secure Shell protocol (SSH). This is typically used by systems administrators to log into employees' computers remotely, largely for use in the infrastructure of businesses, core Internet routers and other similarly important systems. The NSA combines the data collected in this manner with other information to leverage access to important systems of interest. (source: http://www.spiegel.de/international/germany/inside-the-nsa-s-war-on-internet-security-a-1010361.html http://www.spiegel.de/international/germany/inside-the-nsa-s... ) Still incredibly vague. If they're archiving all traffic in hopes of decrypting it some day though, it's safe to say we should treat anything on the internet as the shiny side of one way glass.

boracay 12y ago

My guess is that, at least, some router ssh implementation is insecure, possibly not by accident. From the slides: Page 19: "SSH [...] Potentially recover user names and passwords" Page 36: "SSH - often have router configurations and user credentials [...]" http://www.spiegel.de/media/media-35515.pdf http://www.spiegel.de/media/media-35515.pdf

shazow 12y ago
Right, I saw that also. Is it referring to routers that happen to run SSH with default root/admin passwords or something? I couldn't find anything more concrete.

marcosdumay 12y ago

The slides say they can sometimes decrypt SSH sessions (with ssmintm?) and catpute usernames and passwords from SSH servers. The only unexpected thing I could see there was the lack of anything I didn't know how to do...

shazow 12y ago
Yea, sshmitm makes sense also, but I wouldn't consider that a 0day exactly. :P