Do not trust anything I write down. I have this horrible habit of not checking sources.

  • 0 Posts
  • 26 Comments
Joined 1 year ago
cake
Cake day: July 3rd, 2023

help-circle
  • you missed this part:

    For Terrapin to be viable, the connection it interferes with also must be secured by either “ChaCha20-Poly1305” or “CBC with Encrypt-then-MAC,” both of which are cipher modes added to the SSH protocol (in 2013 and 2012, respectively). A scan performed by the researchers found that 77 percent of SSH servers exposed to the Internet support at least one of the vulnerable encryption modes, while 57 percent of them list a vulnerable encryption mode as the preferred choice.














  • That is literally fucked. There are some scenario’s where I can imagine an ISP wanting to force wireless on. a mesh network for their customers sounds like the most straightforward reason. if you cannot replace the router, faraday the shit out of it. put your own router behind the isp router and don’t forget to change the MAC address of the router (isp will probably block any 3rd party router macs on the network. seen it before)