If your remote host changes and you don't know why, and login anyway, it's on you.
Dirty trick tho, could definitely have caught me if I was in a lazy mood.
Side note, why ssh over 22 anyway? It's so easy to change just to avoid lazy bots.
post
there doesn't seem to be anything here
3 comments in c/privacy@programming.dev view that post
That warning about a modified fingerprint only applies if you’ve sshed to that host before. How many people carefully check the fingerprint if it’s the first time they’ve connected?
replies:
1 comment in c/pulse_of_truth@infosec.pub view that post
reposting what I commented in another thread:
SSH MitM attacks are very easy to pull off. To secure yourself, use key authentication instead of passwords, and don't ignore the warning that SSH will give you saying "WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED".
If you are using something like Tails, you will need to make sure to persist the ssh hosts key file (~/.ssh/known_hosts), or else you will not not be warned when a MitM attack is being performed.
More discussion here: https://news.ycombinator.com/item?id=50166257
no comments (yet)