Post by @simontatham@hachyderm.io

Well, after over a week I thought I might have got away with it this time, but no. I've just had my first email asking me to confirm that #PuTTY is unaffected by last week's #PHP vulnerability.

#php #putty

2 Boosts

0 Likes

Parsingphase

@parsingphase@m.phase.org 2 hr. ago

@simontatham Oh dear.

Colin the Mathmo

@ColinTheMathmo@mathstodon.xyz 3 hr. ago

@simontatham ?!?!?!?

Simon Tatham

@simontatham@hachyderm.io 3 hr. ago

@ColinTheMathmo I had quite a few enquiries of this kind when the Log4j vulnerability happened five years ago. I've been expecting at least one or two about PHP.

(I'm secretly hoping someone will demand I check that PuTTY makes no use of the number 4…)

Haelwenn /элвэн/ :triskell:

@lanodan@queer.hacktivis.me 2 hr. ago

@simontatham @ColinTheMathmo Well… did remind me that SSH can use certificate authorities but thankfully I don't think any SSH implementation comes bundled with any as it's usually for corporate-wide authorisations.