SSH protects the world’s most sensitive networks. It just got a lot weaker.

Novel Terrapin attack uses prefix truncation to downgrade the security of SSH channels. Sometime around the start of 1995, an unknown person planted a password sniffer on the network backbone of Finland’s Helsinki University of Technology (now known as Aalto University). Once in place, this piece of dedicated hardware surreptitiously inhaled thousands of user namesContinue reading “SSH protects the world’s most sensitive networks. It just got a lot weaker.”