BROADCASTS.com

We dig into the RegreSSHion bug, debate it's real threat and explore clever tools to build a tasty fried onion around your system.

Sponsored By:

• Core Contributor Membership: Take $1 a month of your membership for a lifetime!
• Tailscale: Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!
\n
• 1Password Extended Access Management: 1Password Extended Access Management is a device trust solution for companies with Okta, and they ensure that if a device isn't trusted and secure, it can't log into your cloud apps.

Support LINUX Unplugged

Links:

• \U0001f4a5 Gets Sats Quick and Easy with Strike
• \U0001f4fb LINUX Unplugged on Fountain.FM
• Spokane Meetup - No-Li Brewhouse \xb7 JB Events on Gathio
• Plasma/Krunner Docs \u2014 Brent's tip: 'https://search.nixos.org/options?query=\\{@}' (the '\\{@}' is the magic sauce)
• autossh \u2014 Automatically restart SSH sessions and tunnels
• autossh on GitHub
• Spokane Meetup \u2014 No-Li Brewhouse, Sat, Jul 13, 2024, 4:00 PM
• RegreSSHion \u2014 Remote Code Execution Vulnerability In OpenSSH Server
• regreSSHion \u2014 Remote Unauthenticated Code Execution Vulnerability in OpenSSH server.
• NixOS Security advisory: OpenSSH CVE-2024-6387 \u201cregreSSHion\u201d \u2013 update your servers ASAP
• Nasty regreSSHion bug affects around 700K Linux systems
• Qualys CVE-2024-6387 Write-up
• Letmein: Authenticating port knocker - Written in Rust \u2014 Letmein is a simple port knocker with a simple and secure authentication mechanism. It can be used to harden against pre-authentication attacks on services like SSH, VPN, IMAP and many more.
• fwknop: Single Packet Authorization > Port Knocking \u2014 fwknop stands for the "FireWall KNock OPerator", and implements an authorization scheme called Single Packet Authorization (SPA). This method of authorization is based around a default-drop packet filter
• Membership Summer Discount \u2014 Take $1 a month of your membership for a lifetime!
• Jeff links: How to run non-nix executables?
• pick: stu \u2014 TUI (Terminal/Text UI) application for AWS S3