scy, to random
@scy@chaos.social avatar

Eek. Apparently liblzma (part of the xz package) has a backdoor in versions 5.6.0 and 5.6.1, causing SSH to be compromised.

https://www.openwall.com/lists/oss-security/2024/03/29/4

This might even have been done on purpose by the upstream devs.

Developing story, please take with a grain of salt.

The 5.6 versions are somewhat recent, depending on how bleeding edge your distro is you might not be affected.

kkarhan, to linux
@kkarhan@mstdn.social avatar

OS/1337 development:
Using the oldest still maintained did yield about 25% size reduction for it's binary...

The good news: I basically have a new size record with the same settings: 551kB for the Kernel and 402k for toybox - both targeting systems.

The bad news: I've got neither network nor USB support at all!

And I think Network support and having as minimal client is kinda necessary for to work as a "" system at all.

jmhorner, to random
@jmhorner@eattherich.club avatar

Is there a way to automate opening a bunch of frequently used SSH sessions all at once on a Linux based workstation? I'd like to type a single command and wind up with a single terminal window having three tabs.

  • Tab 1 would be labeled "web-logs" and would [upon connection] have a "tail -F" of my nginx logs.

  • Tab 2 would be labeled "mail-logs" and would [upon connection] have a "tail -F" of my postfix logs.

  • Tab 3 would be labeled "lily" and would have a typical interactive session to my minetest server.

I am currently using Asbru Connection Manager which works great, but I'd like to think I could do this with a simple terminal window. Am I wrong?

fell, to linuxphones
@fell@ma.fellr.net avatar

There it is. My purchase has been blessed with . This is going to be my new device.

ricci, to security
@ricci@discuss.systems avatar

Hey! Let's talk about #SSH and #security!

If you've ever looked at SSH server logs you know what I'm about to say: Any SSH server connected to the public Internet is getting bombarded by constant attempts to log in. Not just a few of them. A lot of them. Sometimes even dozens per second. And this problem is not going away; it is, in fact, getting worse. And attackers' behavior is changing.

The graph attached to this post shows the number of attempted SSH logins per day to one of @cloudlab s clusters over a four-year period. It peaks at about 3.4 million login attempts per day.

This is part of a study we did on our production system, using logs of more than 640 million login attempts, covering more than 1,500 hosts on our side and observing more than 840 thousand incoming IP addresses.

A paper presenting our analysis and a new, highly effective means to block SSH brute force attacks ("Where The Wild Things Are: Brute-Force SSH Attacks In The Wild And How To Stop Them") will be presented next week at #NSDI24 by @sachindhke . The full paper is at https://www.flux.utah.edu/paper/singh-nsdi24

Let's dive in. 🧵

marcel, to random German
@marcel@waldvogel.family avatar

Wir sind dieses Wochenende nur durch unglaubliches Glück und extrem knapp an wohl einer der grössten Katastrophen rund um die globale IT-Sicherheit vorbeigeschrammt.

Phuh! Doch — was ist eigentlich passiert? Wie konnte das überhaupt geschehen? Und was können (und müssen) wir tun, um dies zukünftig zu vermeiden?

Und: Danke an die ganzen IT-Helden, die dies an diesem langen Wochenende für uns getan haben.

https://dnip.ch/2024/04/02/xz-open-source-ostern-welt-retten/

5am, to linux
@5am@fosstodon.org avatar

Before executing important commands and scripts over , use in case of disconnect. If your connection drops or you close the terminal, you can SSH back in and enter screen -r to recover from where you left off. Being reunited with that hanging command prompt will be a relief!

livingcoder, (edited ) to rust

Edit: the solution was to add the following configuration to "%USERPROFILE%.cargo\config":
[net]
git-fetch-with-cli = true

Original post:
Has anyone been able to get SSH working on Windows where your #rust dependency is a private repo?
Ex:
(Cargo.toml)
hello_world = { git = "ssh://git@github.com-HelloWorld/AustinHellerRepo/HelloWorld.git" }

You may notice that the host is "github.com-HelloWorld" and that's because that's what works on my Linux machine (via the ".ssh/config" file setup). I want the same Cargo.toml line to work on my Windows machine.

I keep getting "unknown host" errors when I "cargo build" but using git in the repo works just fine.
I would hope that it's just a matter of adding the correct host somewhere. Any help would be appreciated.
#ssh #windows

brokenix, to random

With i can use every buildon my machine with my phone , without installing a single thing on phone but ssh utils
iirc it wasnt the same with plain ssh

image/png

simontatham, to random
@simontatham@hachyderm.io avatar

We've released version 0.81. This is a SECURITY UPDATE, fixing a in ECDSA signing for .

If you've used a 521-bit ECDSA key (ecdsa-sha2-nistp521) with any previous version of PuTTY, consider it compromised! Generate a new key pair, and remove the old public key from authorized_keys files.

Other key types are not affected, even other sizes of ECDSA. In particular, Ed25519 is fine.

This vulnerability has id CVE-2024-31497. Full information is at https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-p521-bias.html

Edent, to github
@Edent@mastodon.social avatar

Hmmm. I have an SSH key which I use for both and .

GitLab has just warned me it will expire in 7 days (but no notification from GitHub!).

So, my wizard friends:

Is there a way to update my key? (I assume no and I need to create a new one.)

Should I have different keys for Hub/Lab?

What's the real danger to my personal repos of having never-expiring keys?

THANKS CLEVER PEOPLE WHO ALMOST CERTAINLY KNOW MORE THAN AN LLM!

voltagex, to linux
@voltagex@aus.social avatar

Hey admins, what's a relatively secure way of me getting an key on to a live USB/netbooted environment?

Thinking age-encrypted file hosted on a server somewhere that my system grabs and asks me to unlock.

abcdw, to til
@abcdw@fosstodon.org avatar

Today I learned: if the scp (utility for copying files over SSH) process was interrupted, you can resume the transfer of the file(s) with rsync!

Especially handy with low-bandwidth and unstable connection.

Experimenting with almost forgotten old good stuff can have its own perks!

manlycoffee, to webdev
@manlycoffee@techhub.social avatar

Am I missing out by using SSH tunnelling to expose an application on my laptop to the Internet, for development purposes?

TheQuinbox, to linux

SSH aliases are so awesome! I learned about this very recently. I have something like the following in my .ssh/config file for every server I SSH into:
Host servername
HostName <domain_or_ip_address>
User <my_username>
IdentityFile <path_to_my_private_key>
, and it lets me just go like, ssh servername, enter my passphrase, and be logged in.

kkarhan, to Smol
@kkarhan@mstdn.social avatar

Wow, @linux does actually improve efficiency over time...

I just compiled a minimal kernel 6.5 for OS/1337 targeting #i486 instead of #i686 and the resulting binary is even 10kB smaller than the one for 6.4.12...

For real: That's awesome cuz it allows me to make the #Floppy version for #486SX a reality and still have #Toybox & #dropbear as #SSH client in it...

Cudos to @torvalds and the maintainers for that:
They really did cleanup the codebase and made it #smol|ler!

https://mstdn.social/@kkarhan/110965679190470398

znpy, to emacs Italian
@znpy@emacs.ch avatar

Do you people use to work on machines?
I do most of my work on a remote machine and I usually run emacs in via .
However, lately I'd like to try something like mode ()
I'm curious if anybody has experiences to share and/or suggestions.

lovisix, to random French
@lovisix@social.zdx.fr avatar

Bordel de merde. borg/borgmatic ne veulent plus prendre mon port ssh



nixCraft, to macos
@nixCraft@mastodon.social avatar
davidism, to github
@davidism@mas.to avatar

You can sign your git commits with SSH keys. GitHub uses the public key for both showing the "verified" badge, and also allowing pushes. What if I don't want to allow pushes with that key anymore, but don't want to invalidate past signatures?

brunty, to random
@brunty@brunty.social avatar

I bloody love the agent stuff

sebsauvage, to random French
@sebsauvage@framapiaf.org avatar


C'est rigolo comme bricolage : une petite modif à faire côté client ssh et côté serveur Apache, et vous pouvez faire passer du ssh directement dans une connexion https.
https://trofi.github.io/posts/295-ssh-over-https.html

fell, to sysadmin
@fell@ma.fellr.net avatar

On my machines, I have begun to disable SSH on IPv4 and replaced it with a tarpit instead. :drgn_comfy_evil:

lafibreinfo, to ubuntu French

Changer le port d'écoute de , sur 23.10 et Ubuntu 24.04 LTS
➡️ https://lafibre.info/serveur-linux/changer-le-port-de-ssh-ubuntu-24-04/
Il y a du changement, c'est qui contrôle le port d'écoute de SSH: modifier le port sur /etc/ssh/sshd_config ne sert plus à rien.
Il faut un "sudo systemctl edit ssh.socket"

vwbusguy, to Bash
@vwbusguy@mastodon.online avatar

Rebooted a server and want to ssh into it as soon as it comes back up?

while [[ 1 ]] ; do ssh some_server && break ; sleep 5 ; done

(This one is particularly useful when you can't ping the remote sever.)

  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • kavyap
  • DreamBathrooms
  • thenastyranch
  • magazineikmin
  • tacticalgear
  • cubers
  • Youngstown
  • mdbf
  • slotface
  • rosin
  • osvaldo12
  • ngwrru68w68
  • GTA5RPClips
  • provamag3
  • InstantRegret
  • everett
  • Durango
  • cisconetworking
  • khanakhh
  • ethstaker
  • tester
  • anitta
  • Leos
  • normalnudes
  • modclub
  • megavids
  • lostlight
  • All magazines