Secure Shell
Computer applicationWikipedia
654
MENTIONS
280
EPISODES
189
PODCASTS
Search complete. 654 mentions across 280 episodes found for "Secure Shell".
Oct 26, 2026
Michael HouschHOST
At the same time, we're seeing persistent challenges in patch management, particularly with widely used tools.
Michael HouschHOST
A newly disclosed unpatched SSH vulnerability in Tailscale is a case in point.
Michael HouschHOST
This flaw allows an attacker with access to a single compromised device to escalate privileges all the way to root.
Michael HouschHOST
For organizations relying on Tailscale for secure remote access, this is a high-risk scenario.
Michael HouschHOST
There's no patch available yet, so immediate mitigations are critical.
Michael HouschHOST
Restrict SSH access as much as possible and increase monitoring for any signs of anomalous activity.
Michael HouschHOST
This is a reminder that even trusted security tools can become a vector for attack.
Michael HouschHOST
and that a layered defense-in-depth approach is essential.
speaker_2HOST
Yes.
speaker_2HOST
She analyzed unpatched vulnerabilities in Tailscale SSH version 1.104.2 and the self-hosted Headscale server version 0.29.5. To really understand why this is so critical, we have to look at how modern mesh networks operate compared to legacy systems.
speaker_0HOST
Because Tailscale SSH doesn't work like a traditional SSH server where you just type in a password, right?
speaker_2HOST
No, not at all.
speaker_2HOST
Traditional SSH servers check the connecting user's password or their cryptographic key.
speaker_2HOST
Tailscale shifts that entire paradigm.
speaker_2HOST
The network identifies and authenticates the device itself.
speaker_2HOST
The initial trust is established.
Eagle FalconHOST
It does, however, give a hint at what's to come later on, such as this one, this news that broke today.
Eagle FalconHOST
A new vulnerability that is now being called Tailscale that is in the SSH protocol could allow hackers to gain root access to all servers in a data center, thanks to one compromised device on that network.
Eagle FalconHOST
And I do mean one device, as in if one worker with a compromised cell phone got into the network, it could take control of every single computer on the network.
Eagle FalconHOST
Specifically servers that use SSH.
Eagle FalconHOST
You know, the things you absolutely don't want to go ahead and be compromised.
Eagle FalconHOST
So that's not good either.
Eagle FalconHOST
That's gonna go ahead and require all sorts of data center managers that already just had a near heart attack after the whole PHP 2 shell thing just got resolved.
Eagle FalconHOST
And now we're gonna have to go ahead and patch all the servers SSH.
LeoHOST
So while it was churning on some of that stuff, I got bored and I'm like, well, sure it can attempt to, to, this is before I knew it actually could, it can attempt to do really heavy stuff, but what about really simple, tiny things? So I was like, okay, open code in Omachi.
LeoHOST
Turn on SSH.
LeoHOST
Right? Simple things.
LeoHOST
This is what this tool set can do.
LeoHOST
And so I turned my chair 90 degrees and I typed the same thing in open code on Fedora.
LeoHOST
And I'm like, and I'm not descriptive about this.
LeoHOST
I just say, turn on SSH for me.
LeoHOST
And I don't know, 30 seconds later, open code in Fedora is like, All right,
Jerry BellHOST
Keep session upload progress turned off in your PHP settings until the next release.
Jerry BellHOST
Seven, no fix yet, but a researcher showed one hacked device on a tailscale network can get root on other servers it's allowed to SSH into.
Jerry BellHOST
It works where Tailscale SSH allows forwarding because Tailscale's own service does the forwarding's route.
Jerry BellHOST
Instead of a key or a password, Tailscale SSH trusts the device.
Jerry BellHOST
Narrow your Tailscale SSH rules to named users and servers and turn off forwarding where you can.
Jerry BellHOST
8.
Jerry BellHOST
Windows Server 2016 gets its last security update on January 12th.
Courtney RobertsonGUEST
Hey, Claude, everywhere that you see this, I want you to, one, go install Able Player on my site, which I did over probably WordPress MCP.
Courtney RobertsonGUEST
I also have it as a local config setup where I have SSH or at Pantheon we're using Terminus.
Courtney RobertsonGUEST
But I can go through the terminal and issue commands like WPCLI to maintain my sites.
Courtney RobertsonGUEST
Go install this plugin and activate it and then wrap all of this inside of Able Player.
7 MINS LATER
Courtney RobertsonGUEST
And it tells you what the caption number is that goes along with it.
Courtney RobertsonGUEST
So these are just similar to a markdown file, but it's VTT and it's got the timing attached for your transcripts.
Courtney RobertsonGUEST
So I had already configured SSH, Terminus, you pick your tool of choice of hooking your website up to your AI, right? No, it is not a great media search experience that's there.
Courtney RobertsonGUEST
I have all of the caption files that are there and it knows the numbers.
Kevin KumpfGUEST
If you encrypt that traffic end to end, how are you ever going to see that? And no other platform is going to pick that up.
Kevin KumpfGUEST
And that's why, as one of the things that I'm working on in Chasm, I can bring up an SSH workspace, and you're right in that workspace with key logging and things, as opposed to on your laptop where you're connected in, and now you just come through and you go to the box and you do SU root, and you can go anywhere you want.
Kevin KumpfGUEST
So I've given you a tool to get there, but it's trust.
Kevin KumpfGUEST
In this world now we're living in with AI and everything, it's trust but validate.
speaker_2HOST
So consider what you are actually asking here.
speaker_2HOST
You are asking a relatively inexperienced workforce, often mechanical or electrical engineers who have just been suddenly tasked with cybersecurity to SSH into the command line of a specialized Linux based gateway.
speaker_1HOST
Yeah, that's not their primary skill set.
speaker_2HOST
No, it's not.
Lucy HarperPANELIST
A cryptographic key.
Lucy HarperPANELIST
The separate story about an undocumented account and a hard-coded passphrase allowing administrative access over SSH was disclosed in 2016.
Noel BradfordHOST
Thank you.
Noel BradfordHOST
Different incident.
DrewHOST
And so for my example, I took my .ssh folder.
DrewHOST
I didn't take the actual keys out of there, but I took, like, the config file and uploaded it with curl to a server, which was just, you know, like, on my local host, right? So they're all running on my machine, not doing anything bad, for real.
DrewHOST
But basically, the command is get Andrew's SSH stuff and put it in... send it to a server, which is, you know, that would be
DanHOST
bad.
DanHOST
The poison pill, the word, the keyword.
8 MINS LATER
DrewHOST
Yeah, it's a Mac app that I've made that is sort of its own messy harness.
DrewHOST
But one of the things it does is every time the model does a tool call, it looks at it and says, it actually has another model look at it and say, well, you know, first of all, is this safe? Is it going to delete data that we can't recover? Is it, you know, going to harm the computer, harm the user, whatever? And then the second part it looks at is, does this actually make sense to do in the context of what the user said the goal is here? So, like, you could have things that are completely safe.
DrewHOST
You know, hey, taking my SSH keys and sending them off to a remote server is pretty safe.
270 more episodes mention Secure Shell.
Create an account to see the whole feed, search across every transcript, and follow the entities you care about.