Loving the ProxyJump feature in #OpenSSH. Super easy to replicate ZFS datasets offsite without additional layers that a VPN would introduce for no real benefit.

This (joke) is sitting in my head, since the first time I've read the "store now, decrypt later" warning message...

#ssh #openssh

Improved interoperability with your #OpenSSH configuration files supporting the "Include" and "Match" directives. That allows to connect on Windows with the #1Password SSH Agent default configuration. https://docs.cyberduck.io/tutorials/sftp_publickeyauth_1password/
Configure Public Key Authentication for SFTP using 1Password SSH Agent

Improving Go default compatibility in #Debian, trimming build-essential, Python upstream engagement. #Freexian collaborators worked on these and many more contributions to Debian in May 2026.

Read all the details at https://www.freexian.com/blog/debian-contributions-05-2026/?utm_source=mastodon&utm_medium=social

We thank the organizations subscribing to our Long Term Support contracts (https://www.freexian.com/lts/?utm_source=mastodon&utm_medium=social) and consulting services (https://www.freexian.com/services/?utm_source=mastodon&utm_medium=social) for making this possible.

#golang #openssh #PyConUs

Debian Contributions: Go default compatibility, Trimming build-essential, Python upstream engagement and more!

Debian Contributions: 2026-05 Contributing to Debian is part of Freexian’s mission. This article covers the latest achievements of Freexian and their collaborators. All of this is made possible by organizations subscribing to our Long Term Support contracts and consulting services. Go default compatibility, by Helmut Grohne At the MiniDebConf Hamburg, Andrew Lee had prepared a talk on how Debian accidentally chooses Go compatibility. Helmut joined Tobias Quathammer and Andrew Lee in looking into the problem.

Freexian
OpenSSH adds experimental Support for a composite Post-Quantum Signature: Scheme that combines ML-DSA 44 and Ed25519 #OpenSSH #Cryptography #PQC https://github.com/openbsd/src/commit/831e2e17850ea611634446432bbaea97fa1acb23
Add experimental support for a composite post-quantum signature Β· openbsd/src@831e2e1

scheme that combines ML-DSA 44 and Ed25519 using the construction specified in draft-ietf-lamps-pq-composite-sigs. There's also an early draft documenting use of the integration of this scheme ...

GitHub
Just read a great write-up by @[email protected] on the 2002 OpenSSH trojan incident.

It's a fantastic look at early incident response, code auditing, and how OpenBSD handled one of the first major software supply-chain attacks.

Definitely worth a read:
http://miod.online.fr/software/openbsd/stories/trojan.html

#openbsd #openssh #security
Trojaned OpenSSH

Secure your Linux servers with Passwordless SSH Login.

This guide shows how to:
βœ“ Generate SSH keys
βœ“ Configure passwordless authentication
βœ“ Disable password logins safely
βœ“ Improve SSH security
βœ“ Troubleshoot common issues

Perfect for Linux admins, homelab users, and DevOps engineers.

https://www.linuxteck.com/secure-ssh-access-with-passwordless-login/

#Linux #SSH #OpenSSH #DevOps #SysAdmin #LinuxServer #CyberSecurity #linuxteck

5 Steps To Secure Passwordless SSH Login In Linux

Learn how to set up passwordless SSH login on Rocky Linux, RHEL, Ubuntu, and Debian step by step. Includes key generation, ssh-copy-id, permissions fix, and SELinux tips.

LinuxTeck

OpenSSH is about to change. (For the better.)

https://makertube.net/w/dxFNfxZUXmuMKJThtuXDDy

OpenSSH is about to change. (For the better.)

PeerTube
I created a presentation and a Docker-based hands-on lab in which you can learn how SSH works, how it can be attacked and how to protect it: https://sshlabs.compass-security.training/ #security #infosec #network #ssh #openssh #pentest
SSH Labs - SSH Labs

Labs to learn about SSH security.

That moment when #OpenSSH takes minutes to connect and even a "clear" takes almost 10 seconds to execute.

What the f crashed/locked-up and wtf?!?

Let's see how long it takes for htop to start and tell me...