https://blog.thc.org/infecting-ssh-public-keys-with-backdoors

I am not a security expert and I wonder:

  1. Does the described method infect the remote or local machine (from which I connect)?
  2. Can this method be prevented? For example, correctly configuring your etc/ssh/ssh_config

It seems that every VPS supplier can hack you? The description shows that AWS does “harmless”, but what if my hosting is a bad actor?

  • chonkyninja@lemmy.worldEnglish
    11·
    6 days ago

    This isn’t an infection, this is some moron copying a bunch of random shit and then ignore all the warnings. Also it’s specifically targeting Ubuntu.