OpenSSH bashing

[mindcorrosive]

Ah, just great.. It seems that OpenSSH is the word of the day, if you are security-concerned, and sporting a Debian-derivative.. Now I have to update manually the server, the laptop, and to change the security keys.. I really don't feel like checking if they are vulnerable or not, with my luck today I know what the result will be. First time I see such a serious security advisory, and a lengthy solution from Debian. And, of course, I have to warn all my users about the key changes, and to explain why that has to be done.. Admin work is just plain boring..

[CG1980]

Better change the default SSH port of 22 to something different (>10k) to evade automatic portscans...

[mindcorrosive]

yeah, I'm doing this every time I install the ssh-server, but still I felt like bashing around for this security hole big as a Cadilac Eldorado. :)