Comment Re:Anyone can intercept SSH some of the time (Score 1) 278
There is no window of opportunity with SSH even with a new install.
Oh really? Please tell me what magic you use with SSH. Are you copying your keys over manually or something?
There is no window of opportunity with SSH even with a new install.
Oh really? Please tell me what magic you use with SSH. Are you copying your keys over manually or something?
Well, anyone with a functioning brain stem who has not been brainwashed is opposed to the shithole that the US rulers have turned the US into
What a purely coherent basis and sound philosophical foundation from which to make decisions. I'll bet you're a whole bundle of good ideas.
Do you have slightest idea how ssh logon works?
Why yes, yes I do.
They have fake certificates from trusted authorities for some major sites, and use MITM attacks to serve up fake pages with them. We know that GCHQ loves doing the latter, so it's a question of working out which certificate authorities have been compromised and deleting them. We can also potentially defend against this by using more certificate pinning and warnings which certificates change unexpectedly, as well as distributed certificate checks (to make sure the one you get is the same one everyone else gets).
I don't think so because not many people use trusted authorities with SSH. (In fact I've never heard of anyone doing that, but surely there are people who do). Most likely the NSA just sits there sniffing traffic that goes by, waiting until there's an SSH to a new box (which actually happens a lot, every time you reinstall or something), then begin sniffing. After that they have the password and everything, so the attack can expand.
If the encryption is properly implemented,
I think that's the point, SSL is broken, which is why (part of) the world has moved on.
The authenticity of host '...' can't be established. RSA key fingerprint is
That's ssh letting you know that a man-in-the-middle attack could be successfully launched at you, and decrypt all your communication.
How do you know which kind of contract she has with her label and who 'owns the rights' to the music?
What did I say that makes you think I know?
"If I do not want others to quote me, I do not speak." -- Phil Wayne
