Hak5 - SSH Public Key Fingerprints and known_hosts, Hak5 1110 part1

Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:
____________________________________________
Continuing with Proxies, SOCKS5 and SSH, Darren and Shannon cover SSH Public Key Fingerprints, then build a free Windows SSH Server and configure Key Pairs for a Linux client.
If you're into Hak5 you'll love our new show by hosts Darren Kitchen and Shannon Morse. Check out www.revision3.com/haktip
Whether you're a beginner or a pro, www.revision3.com/haktip is essential viewing for current and aspiring hackers, computer enthusiasts, and IT professionals. With a how-to approach to all things Information Technology, HakTip breaks down the core concepts, tools, and techniques of Linux, Wireless Networks, Systems Administration, and more.
And let's not forget to mention that you can follow us on / hak5 and / technolust , revision3.com/hak5/follow to the show and get all your Hak5 goodies, including the infamous wifi-pineapple over at hakshop.com . If you have any questions or suggestions please feel free to contact us at [e-mail].
____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community - where all hackers belong.

[@StellarMoig]

within the first minute, references to 3 of my favorite scifi shows ever. That is why I watch this.

[@tmar23]

Got a jornada 720 in the closet. Was great for some terminal service IT work back years ago when I was working for a manufacturing company. Saved a lot of walking across shipping/manufacturing/warehouse floors to get to a terminal and was still faster then the crap TSclients they had.

[@JNET_Reloaded]

Miss episodes like this the fan mail the learning everything now its not the same bring back the og mode for hak5!!!!

[@Oscarrudnas]

So if you havent any VPS to connect to, should I set up one? What is a good VPS and does it have any pros to have a vps server?

[@TremendousSax]

Only during the first connection. When you haven't connected to the server before (more accurately, you don't have an entry for the server in ~/.ssh/known_hosts), your ssh client pops up a warning about not knowing the public key of the server. At that point if you're worried about MITM, call the sysadmin of the SSH server and verify the fingerprint out-of-band, e.g. with a phone call. As long as you maintain the integrity of your local copy of the server's public key, you're safe from MITM.

[@mariobranco123]

What is the utility of fingerprint ?

[@gadgetmerc]

ssh is my friend

[@PilotPlater]

woo

[@samdotts8803]

did he just draw a set of balls right in all of our faces?