The Terrapin Attack: How a Few Deleted Packets Weaken SSH

SSH is the protocol most engineers trust without a second thought. Terrapin, disclosed in December 2023 as CVE-2023-48795, showed that a network attacker sitting between client and server can quietly ...