{"id":1213359,"date":"2023-12-19T12:35:09","date_gmt":"2023-12-19T17:35:09","guid":{"rendered":"https:\/\/www.prime-wow.com\/?p=1213359"},"modified":"2023-12-19T12:35:09","modified_gmt":"2023-12-19T17:35:09","slug":"ssh-protects-the-worlds-most-sensitive-networks-it-just-got-a-lot-weaker","status":"publish","type":"post","link":"https:\/\/www.prime-wow.com\/?p=1213359","title":{"rendered":"SSH protects the world\u2019s most sensitive networks. It just got a lot weaker"},"content":{"rendered":"<div id=\"rss-wrap\">\n<figure class=\"intro-image intro-left\">\n  <img decoding=\"async\" src=\"https:\/\/www.prime-wow.com\/wp-content\/uploads\/2023\/12\/terrapin-data-attack-800x450-1.jpg\" alt=\"Terrapin is coming for your data.\" \/><\/p>\n<p class=\"caption\" style=\"font-size:0.8em\"><a href=\"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2023\/12\/terrapin-data-attack.jpg\" class=\"enlarge-link\" data-height=\"1440\" data-width=\"2560\">Enlarge<\/a> <span class=\"sep\">\/<\/span> Terrapin is coming for your data. (credit: Aurich Lawson | Getty Images)<\/p>\n<\/figure>\n<div><a name=\"page-1\" \/><\/div>\n<p>Sometime around the start of 1995, an unknown person planted a password sniffer on the network backbone of Finland\u2019s Helsinki University of Technology (now known as Aalto University). Once in place, this piece of dedicated hardware surreptitiously inhaled thousands of user names and passwords before it was finally discovered. Some of the credentials belonged to employees of a company run by Tatu Yl\u00f6nen, who was also a database researcher at the university.<\/p>\n<p>The event proved to be seminal, not just for Yl\u00f6nen&#8217;s company but for the entire world. Until that point, people like Yl\u00f6nen connected to networks using tools which implemented protocols such as Telnet, rlogin, rcp, and rsh. All of these transmitted passwords (and all other data) as plaintext, providing an endless stream of valuable information to sniffers. Yl\u00f6nen, who at the time knew little about implementing strong cryptography in code, set out to develop the <a href=\"https:\/\/en.wikipedia.org\/wiki\/Secure_Shell\">Secure Shell Protocol (SSH)<\/a> in early 1995, about three months after the discovery of the password sniffer.<\/p>\n<p>As one of the first network tools to route traffic through an impregnable tunnel fortified with a still-esoteric feature known as &#8220;public key encryption,&#8221; SSH quickly caught on around the world. Besides its unprecedented security guarantees, SSH was easy to install on a wide array of operating systems, including the myriad ones that powered the devices administrators used\u2014and the servers those devices connected to remotely. SSH also supported <a href=\"https:\/\/goteleport.com\/blog\/x11-forwarding\/\">X11 forwarding<\/a>, which allowed users to run graphical applications on a remote server.<\/p>\n<\/div>\n<p><a href=\"https:\/\/arstechnica.com\/?p=1991880#p3\">Read 29 remaining paragraphs<\/a> | <a href=\"https:\/\/arstechnica.com\/?p=1991880&amp;comments=1\">Comments<\/a><\/p>\n<p>&#013;<br \/>\n&#013;<br \/>\nSource: Ars Technica &#8211; <a href=\"https:\/\/arstechnica.com\/?p=1991880\" target=\"_blank\" rel=\"noopener\">SSH protects the world\u2019s most sensitive networks. It just got a lot weaker<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Enlarge \/ Terrapin is coming for your data. (credit: Aurich Lawson | Getty Images) Sometime around the start of 1995, an unknown person planted a password sniffer on the network backbone of Finland\u2019s Helsinki University of Technology (now known as &hellip; <a href=\"https:\/\/www.prime-wow.com\/?p=1213359\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":1213360,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[27,110],"tags":[73],"class_list":["post-1213359","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ars-technica","category-unfiltered-rss","tag-ars-technica"],"_links":{"self":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1213359","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1213359"}],"version-history":[{"count":0,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/posts\/1213359\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=\/wp\/v2\/media\/1213360"}],"wp:attachment":[{"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1213359"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1213359"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.prime-wow.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1213359"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}