/dev/chat

« first day (2930 days earlier) ← previous day next day → last day (2016 days later) »

12:06 AM

I would like to configure my lynx installation but need the /etc/lynx-cur/lynx.cfg. Where is the stored on a mac? I essentially just did. brew install lynx

7 hours later…

Kusalananda

6:42 AM

@William brew list --verbose lynx | grep lynx.cfg

6 hours later…

Rui F Ribeiro

12:19 PM

And this is why I do not believe in letting SSH open to the Internet... thehackernews.com/2018/10/libssh-ssh-protocol-library.html

Faheem Mitha

12:47 PM

@RuiFRibeiro Why does it say Openssh is not affected?

Stephen Kitt

@FaheemMitha because OpenSSH doesn’t use libssh

Faheem Mitha

@StephenKitt Oh, I didn't know that. Libssl instead?

No, probably not. That's encryption.

Stephen Kitt

@FaheemMitha it does use libssl, but it has its own implementation of all the SSH stuff

Faheem Mitha

libssh and other things are mentioned on this page, for some reason - en.wikibooks.org/wiki/OpenSSH/Development#libssh

Kiwy

1:45 PM

Hello Chat !

Jenny D

2:10 PM

Q: CVE-2018-10933 - Bypass SSH Authentication - libssh vulnerability

Looks like CVE-2018-10933 was just released today and you can find a summary here from libssh here Summary: libssh versions 0.6 and above have an authentication bypass vulnerability in the server code. By presenting the server an SSH2_MSG_USERAUTH_SUCCESS message in place of the SSH2_MSG_USE...