2
votes
0answers
63 views

Router eavesdropping on SSH tunnel? [migrated]

So I'm on a public WiFi network that blocks websites like YouTube in order to conserve bandwidth. I'm assuming the router is monitoring all traffic and rejecting all requests sent to the sites on its ...
1
vote
3answers
122 views

Would SSH MitM attacks utilize spoof IPs?

I am presented with SSH log from a SSH server and the said SSH server only accepts connection from 2 known public IPs over WAN. The content of the log shows that a user was successfully ...
9
votes
1answer
2k views

Is it safe to disable SSH host key checking if key-based authentication is used?

I have some tasks that go like so: Spin up some new EC2 instances (Amazon Web Services) Get them to execute a task Kill them The problem is that they're (seemingly) randomly assigned an IP ...
1
vote
2answers
637 views

Is SSH2 still vulnerable to man-in-middle attacks?

With SSH using RSA public key authentication, can an attacker spoof the server IP address and connect with client to obtain client password?
2
votes
2answers
544 views

How to correctly secure a ssh session against MITM attack?

How do you improve the security of your ssh session against a man-in-the-middle attack?
8
votes
5answers
612 views

How do RSA fingerprints protect from MITM attacks?

I understand that RSA fingerprints are used to verify that you are really connecting directly to who you want to connect to, and not someone else posing as that site. Like when you do a git push, it ...
1
vote
3answers
328 views

Monitoring and filtering of arbitrary outgoing data

I would like to be able to not just centrally monitor but also filter any organizational data moving out our edge routers, regardless of the sender application and regardless of the protocol/port used ...