Free Republic

Microsoft has quietly added beta versions of an SSH client and server to the next major update of Windows 10. The SSH client and server will allow admins and developers to securely connect to other systems without needing a third-party app like the popular PuTTY. Over the years we have seen Microsoft transform from a fairly closed company to one that embraces and supports open source software and standards. This move isn’t unexpected but is another step in that direction. With OpenSSH baked in, it becomes for developers to create secure connections between systems for transferring data and issuing commands....

Internet-connected industrial devices could be accessible to anyone, with no password, thanks to a coding error by a gateway manufacturer. Taiwanese firm Advantech patched the firmware in some of its serial-to-IP gateway devices in October to remove a hard-coded SSH (Secure Shell) key that would have allowed unauthorized access by remote attackers. But it overlooked an even bigger problem: Any password will unlock the gateways, which are used to connect legacy serial devices to TCP/IP and cellular networks in industrial environments around the world. Researchers from security firm Rapid7 discovered the vulnerability in the revised firmware, version 1.98, released for...

SSH glitch gives 'skeleton key' to networks Patrick Gray ZDNet Australia September 18, 2003, 11:10 BST A patch for the Unix remote management shell has been re-released after suggestions attackers have for months been exploiting the vulnerability to gain access to systems A critical security flaw in SSH has been revealed that threatens servers worldwide. SSH is a widely used encrypted remote management shell for Unix, Linux and BSD platforms. Experts say attackers have been exploiting the vulnerability to gain access to systems illegally for months. What started as quiet mumblings and rumours turned into screaming warnings this week as...

I have been reading about ssh and using tunnelling to bypass proxy servers and go thru firewalls. I have DSL at home and I have loaded the freeware AnalogX web proxy server broadcasting on port 6588. I have also loaded up the Putty ssh client at home and at work. I have the ssh clients on both ends listening at port 5000 and redirecting to port 8080 at work and to port 6588 at home. i.e. localhost:5000 port forwarding to localhost:8080. I then directed internet explorer at work to use the proxy 127.0.0.1(or localhost):8080 for web access This configuration should...