openssh/openssh-portable on Hacker News

…wanting to kill sshd "first" (or _ever_ based on these renewed findings!) Can you elaborate? [0] https://github.com/openssh/openssh-portable/blob/e51dc7fab61...

comment by herpderperator · 2021-03-31 · in EC2 Serial Console

The PR is at https://github.com/openssh/openssh-portable/pull/194 Looks surprisingly easy enough.

comment by rurban · 2020-11-07 · in Deprecating scp

It looks like the openssh main dev is positive about this change: https://github.com/openssh/openssh-portable/pull/194#pullreq... That sounds like it will probably be accepted after a few more minor fixes.

comment by hannob · 2020-11-06 · in Deprecating scp

…It's an ad network. It has to deal with compliance in many regions. There are mobile apps. [0]: https://github.com/openssh/openssh-portable/graphs/contribut...

comment by cies · 2020-09-28 · in It used to be simpler to teach Unix

…what's the deal? Does one function call for the case when systemd is not there break some religion? https://github.com/openssh/openssh-portable/blob/V_8_3/sshd....

comment by wruza · 2020-09-04 · in Understanding Daemons

…a lot easier to deploy in comparison to Teleport, user-friendly UI for average users. [1]: https://github.com/openssh/openssh-portable/blob/master/cont... [2]: https://github.com/emre/storm/issues/157

comment by terrywang · 2020-04-02 · in How to SSH Properly

…patch Apple may have, this seems to be the relevant file and logging code (starting at line 448): https://github.com/openssh/openssh-portable/blob/master/sshc... In that code, the only thing that can set the "strport" value that is used in…

comment by makecheck · 2020-03-31 · in I think Catalina 10.15.4 broke SSH

…it. The U2F signature stuff is different from SSH, so it needs a new authentication protocol: https://github.com/openssh/openssh-portable/blob/master/PROT...

comment by tulir · 2020-02-14 · in OpenSSH 8.2

…not have a key limit, which enables using a unique public key per server for privacy/anonymity [1] https://github.com/openssh/openssh-portable/blob/master/PROT...

comment by HHad3 · 2019-11-05 · in OpenSSH's Support for U2F/Fido Security

▲ 233

OpenSSH's Support for U2F/Fido Security

story by prennert · 2019-11-05 · 49 comments

…nice. The linked post really unclear to me about the security properties provided. This document ( https://github.com/openssh/openssh-portable/commit/57ecc1062... ) is a least a little more clear about what its doing, though it doesn't…

comment by nullc · 2019-11-01 · in U2F Support in OpenSSH Head

I don't think that function is used other than for logging. https://github.com/openssh/openssh-portable/blob/b52c0c2e649... There the "command" variable is the result of the function you mention, but here the use is only for logging. The…

comment by mbrock · 2019-09-02 · in Building Interactive SSH Applications

Changing this to use ' instead of " may fix this issue. https://github.com/openssh/openssh-portable/blob/master/misc... Because then you'll end up with '$(some)' instead of "$(some)"

comment by megous · 2019-09-02 · in Building Interactive SSH Applications

…at the escaping function, it will allow $(execute whatever you want), because it doesn't handle $. https://github.com/openssh/openssh-portable/blob/master/misc... Anyway, this depends on being able to specify any username, which while…

comment by megous · 2019-09-02 · in Building Interactive SSH Applications

…the shielded private host keys. sshkey_shield_private => explicit_bzero() openbsd-compat/freezero.c https://github.com/openssh/openssh-portable/commit/4f7a56d5e... It's only using the insecure freezero, which is using the insecure…

comment by rurban · 2019-06-22 · in SSH gets protection against side-channel attacks

…comes from its simplicity [2]? [1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6111 [2] https://github.com/openssh/openssh-portable/blob/master/scp....

comment by bArray · 2019-03-29 · in Call for testing: OpenSSH 8.0

…caveat about starting it under a debugger applies, but that certainly makes it less trivial. [1]: https://github.com/openssh/openssh-portable/blob/5ee3fb5affd...

comment by deathanatos · 2018-05-22 · in Extracting SSH Private Keys from Windows 10 ssh-agent

…SIZE_MAX / nmemb < size) { errno = ENOMEM; return NULL; } return realloc(optr, size * nmemb); } [0] https://github.com/openssh/openssh-portable/blob/master/open...

comment by masklinn · 2016-12-06 · in Why does calloc exist?

…what the 3rd "none" field is, but after some digging it appears to be the compression algorithm: https://github.com/openssh/openssh-portable/blob/master/kex.... And I confirmed this with ssh -C: debug1: kex: server->client aes256-ctr…

comment by zackelan · 2016-01-15 · in OpenSSH: client bug CVE-2016-0777

…See https://gist.github.com/AGWA/e92d4f5343be1f7a941d#file-undoc... as well as the source https://github.com/openssh/openssh-portable/blob/e6c85f8889c...

comment by agwa · 2016-01-14 · in OpenSSH: client bug CVE-2016-0777

https://github.com/openssh/openssh-portable/blob/e6c85f8889c... Here you go

comment by ryanlol · 2016-01-14 · in OpenSSH: client bug CVE-2016-0777

…attributes or restricting access based on an attribute in the certificate are not part of the spec: https://github.com/openssh/openssh-portable/blob/master/PROT... When I first learned about OpenSSH Certskeys, I was really excited; Spent…

comment by pquerna · 2015-10-20 · in Let's Encrypt is Trusted

…of hope I'm wrong somehow; this is a bit disturbing. [1] http://www.openssh.com/txt/release-6.9 [2] https://github.com/openssh/openssh-portable/commit/88a7c598a... [3] https://github.com/openssh/openssh-portable/commit/d921082ed... [4]…

comment by scintill76 · 2015-07-22 · in Bug in widely used OpenSSH opens servers to password cracking