HN Explorer

9 comments

[ 0.64 ms ] story [ 3.9 ms ] thread
jscd
Am I crazy to think this title is just incorrect? They say AI reports are welcome, not fixes.
alpn
"[..] a security bug identified by AI tools is subsequently independently discovered by a different researcher. This suggests that adversaries who do not report bugs to OSS projects are likely to be able to discover these bugs too. Given this, the OpenSSH team will, for now, be making more frequent releases to get bugfixes into users' hands more quickly rather than batching them until the next planned release."
4L3XV33
Glad they're not letting potential high false positive rate preclude discovery of true positives. Better to get a lot of noise with a little bit of signal, if the alternative was not get that signal at all.
yjftsjthsd-h
> ssh(1): add a "ssh -Z user@host" mode that prints the keys that will be tried for public key authentication in the order that they will be used.

Oh, that's a nice new feature:)

3asj176
No, AI assistance is NOT welcome in general. They mention security bug reports, so using AI like ASAN etc. is welcome.
gertrunde
Wow... What have they done to that webpage to make it that unreadable?

And why?

Ouch.

qudat
Darn, still no host headers so we can reverse proxy on a single ip
stragies
You could wrap a TLS-connection around your SSH-connection, and then use the ALPN to indicate SSH, so that your reverse proxy knows, what to do with it.