OpenSSH introduces options to penalize undesirable behavior(undeadly.org)

368 points by zdw 2 years ago | 251 comments

OpenBSD Journal article on Damien Miller's commit adding PerSourcePenalties and PerSourcePenaltyExemptList options to sshd to penalize undesirable client behavior.

OpenBSD/ARM64 on Hetzner Cloud(undeadly.org)

219 points by peter_hansteen 3 years ago | 124 comments

Possible firmware issues for Apple Silicon OpenBSD/ARM64 users(undeadly.org)

43 points by peter_hansteen 2 years ago | 14 comments

OpenBSD p2k23 Hackathon landry on chasing memory corruptions(undeadly.org)

44 points by peter_hansteen 3 years ago | 3 comments

OpenBSD-current now runs as guest under Apple Hypervisor(undeadly.org)

386 points by gpi 9 months ago | 52 comments

OpenBSD Journal article reporting that OpenBSD-current on arm64 now runs as a guest OS under Apple Hypervisor, following commits by Helg Bredow and Stefan Fritsch.

OpenBSD 7.6 Released(undeadly.org)

29 points by t-3 2 years ago | 4 comments

OpenSSH introduces options to penalize undesirable behavior(undeadly.org)

368 points by zdw 2 years ago | 251 comments

OpenBSD Journal article on Damien Miller's commit adding PerSourcePenalties and PerSourcePenaltyExemptList options to sshd to penalize undesirable client behavior.

How SSH port became 22(ssh.com)

358 points by sysoleg 2 years ago | 140 comments

SSH Academy page from ssh.com explaining SSH ports and the story of how SSH was assigned port 22.

A new model for open source: closed to pull requests, open to remix(ghuntley.com)

9 points by ghuntley 11 days ago | 5 comments

Geoffrey Huntley blog post proposing an open source model where projects reject pull requests but invite others to fork and remix the code.

OpenSSH Post-Quantum Cryptography(openssh.com)

428 points by throw0101d 1 year ago | 114 comments

OpenSSH documentation page explaining its post-quantum key agreement algorithms, defaults since 9.0 and 10.0, and the warnings for non-PQ key exchange in OpenSSH 10.1.

Backdoor in upstream xz/liblzma leading to SSH server compromise(openwall.com)

4122 points by rkta 2 years ago | 1526 comments

Andres Freund's oss-security mailing list post disclosing a backdoor in upstream xz/liblzma tarballs 5.6.0 and 5.6.1 that compromises SSH servers.

OpenCode Hacked: User credentials leaked(twitter.com)

794 points by pranshuchittora 8 days ago | 145 comments

OpenCode's post on X announcing a security breach tied to a large-scale distillation attack that affected 1.4% of OpenCode Console users.