PSA for bad OpenSSH bug: if you don't want any host you SSH to be able to get your **private** key, read this now: http://undeadly.org/cgi?action=article&sid=20160114142733 …
-
"Hey something's wrong with web47." "Hmm, let me SSH in. Oh it's rooted." *bam* You just lost every host you can SSH into w/ that keypair.
@patio11 Has anyone *actually* confirmed what data is in memory at the vulnerable point? E.g. if you use ssh-agent you should be fine.
-
-
@patio11 For non-agent keys, Is the encrypted? plaintext? private key in RAM at the vulnerable point? Do we know?Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.