# RegreSSHion Strikes

URL: /show/linux-unplugged/570/
> We dig into the RegreSSHion bug, debate it's real threat and explore clever tools to build a tasty fried onion around your system.

- Show: [LINUX Unplugged](/show/linux-unplugged/)
- Episode: 570
- Date: 2024-07-07
- Hosts: chris, wes, brent
- Duration: 00:47:06
- Audio: https://aphid.fireside.fm/d/1437767933/f31a453c-fa15-491f-8618-3f71f1d565e5/e0a79ddc-351e-4a10-ab88-2fb436b0e1c2.mp3



Sponsors:
- [Jupiter Signal Network Membership](/sponsors/memberful.com-lup/index.md): Put your support on automatic with our annual plan, and get one month of membership for free!
- [1Password Extended Access Management](/sponsors/1password.com-lup/index.md): Secure every sign-in for every app on every device.
- [Tailscale](/sponsors/tailscale.com-lup/index.md): Tailscale is a programmable networking software that is private and secure by default - get it free on up to 100 devices!




### Episode Links

* [💥 Gets Sats Quick and Easy with Strike](https://strike.me/ "💥 Gets Sats Quick and Easy with Strike")
* [📻 LINUX Unplugged on Fountain.FM](https://www.fountain.fm/show/dWiuBeqpDSM86AwXRXov "📻 LINUX Unplugged  on Fountain.FM")
* [Spokane Meetup - No-Li Brewhouse · JB Events on Gathio](https://jbevents.hybridsarcasm.xyz/mqsu0M5BiBA_2J9GS5ODK "Spokane Meetup - No-Li Brewhouse · JB Events on Gathio")
* [Plasma/Krunner Docs](https://userbase.kde.org/Plasma/Krunner "Plasma/Krunner Docs") — Brent's tip: 'https://search.nixos.org/options?query=\\{@}' (the '\\{@}' is the magic sauce)
* [autossh](https://www.harding.motd.ca/autossh/ "autossh") — Automatically restart SSH sessions and tunnels
* [autossh on GitHub](https://github.com/Autossh/autossh "autossh on GitHub")
* [Spokane Meetup](https://www.meetup.com/jupiterbroadcasting/events/301471716/ "Spokane Meetup") — No-Li Brewhouse, Sat, Jul 13, 2024, 4:00 PM
* [RegreSSHion](https://www.phoronix.com/news/RegreSSHion-CVE-2024-6387 "RegreSSHion") — Remote Code Execution Vulnerability In OpenSSH Server
* [regreSSHion](https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server "regreSSHion") — Remote Unauthenticated Code Execution Vulnerability in OpenSSH server.
* [NixOS Security advisory: OpenSSH CVE-2024-6387 “regreSSHion” – update your servers ASAP](https://discourse.nixos.org/t/security-advisory-openssh-cve-2024-6387-regresshion-update-your-servers-asap/48220 "NixOS Security advisory: OpenSSH CVE-2024-6387 “regreSSHion” – update your servers ASAP")
* [Nasty regreSSHion bug affects around 700K Linux systems](https://www.theregister.com/2024/07/01/regresshion_openssh/ "Nasty regreSSHion bug affects around 700K Linux systems")
* [Qualys CVE-2024-6387 Write-up](https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt "Qualys CVE-2024-6387 Write-up")
* [Letmein: Authenticating port knocker - Written in Rust](https://github.com/mbuesch/letmein "Letmein: Authenticating port knocker - Written in Rust") — Letmein is a simple port knocker with a simple and secure authentication mechanism. It can be used to harden against pre-authentication attacks on services like SSH, VPN, IMAP and many more.
* [fwknop: Single Packet Authorization > Port Knocking](https://www.cipherdyne.org/fwknop/ "fwknop: Single Packet Authorization > Port Knocking") — fwknop stands for the "FireWall KNock OPerator", and implements an authorization scheme called Single Packet Authorization (SPA). This method of authorization is based around a default-drop packet filter
* [Membership Summer Discount](https://jupitersignal.memberful.com/checkout?plan=52946&coupon=summer "Membership Summer Discount") — Take $1 a month of your membership for a lifetime!
* [Jeff links: How to run non-nix executables?](https://nix.dev/guides/faq#how-to-run-non-nix-executables "Jeff links: How to run non-nix executables?")
* [pick: stu](https://github.com/lusingander/stu "pick: stu") — TUI (Terminal/Text UI) application for AWS S3