Live data from Hacker News

PuTTY 0.68 has been released

chiark.greenend.org.uk

41–50 of 152 posts

Re: PuTTY 0.68 has been released

#41
post #26
post #8

It always makes me sad to see that the PuTTY download page is served over unsecure HTTP.

At this point it's totally inexcusable. Just buy the SSL cert already, or get a free one from Let's Encrypt.

Note the "s". TLS 1.2, AES 256 GCM, ECDHE_RSA. Hard to ask for more than that.

https://the.earth.li/~sgtatham/putty/0.68/

Re: PuTTY 0.68 has been released

#42

I've stopped using PuTTY and now use MinTTY with the Ubuntu subsystem and the regular old Ubuntu SSH client. Specifically this thing: https://github.com/mintty/wsltty It's real nice and even supports 24bit colour if you're into that.

Another option: SSH inside WSL in windows 10.

Re: PuTTY 0.68 has been released

#43
post #36

Earlier quoted context omitted.

And obviously a network attacker would never think to modify the insecurely served downloads page to point to a different download URL.

This is a possibility. But downloads have been served out of "the.earth.li/~sgtatham/putty/" for years. Yes, it's owned by someone else and exploding turtles all the way down [1], but now that "the.earth.li/~sgtatham/putty/" is HTTPS, the checksums are properly authentic as attested by the same operator as the one who has supplied PuTTY downloads for years. I've mirrored the most important checksums here, another HTT…

>I've mirrored the most important checksums here, another HTTPS site, so that if any of them ever differ you know to distrust the files.

Or maybe you're a very motivated attacker.

Re: PuTTY 0.68 has been released

#45
post #27

On Windows 10, with Windows Subsystem for Linux installed, I don't find myself using Putty anymore.

Are you using an insider build or a different shell than Windows' cmd? I find myself using Putty to connect to a Linux subsystem ssh server just to get a decent terminal emulator with full colour support!

Give this a whirl: https://github.com/mintty/wsltty

Re: PuTTY 0.68 has been released

#46
post #6
post #2

Release Notes: Security fix: an integer overflow bug in the agent forwarding code. See vuln-agent-fwd-overflow. Security fix: the Windows PuTTY binaries should no longer be vulnerable to hijacking by specially named DLLs in the same directory (on versions of Windows where they previously were). See vuln-indirect-dll-hijack. Windows PuTTY no longer sets a restrictive process ACL by default, because this turned out to…

This is the information I came to find. Thanks!

Why would such a small, simple program need to be 64 bit? Exactly what changes when moving puTTY from 32 bit to 64 bit? It now takes up more memory?

Re: PuTTY 0.68 has been released

#47

I've stopped using PuTTY and now use MinTTY with the Ubuntu subsystem and the regular old Ubuntu SSH client. Specifically this thing: https://github.com/mintty/wsltty It's real nice and even supports 24bit colour if you're into that.

Another option: SSH inside WSL in windows 10.

The default terminal was a bit limited for me, but I hear they're making big improvements to it in later builds.

Re: PuTTY 0.68 has been released

#48
post #27

On Windows 10, with Windows Subsystem for Linux installed, I don't find myself using Putty anymore.

Are you using an insider build or a different shell than Windows' cmd? I find myself using Putty to connect to a Linux subsystem ssh server just to get a decent terminal emulator with full colour support!

You may be interested in ConEmu:

https://conemu.github.io/ https://conemu.github.io/en/BashOnWindows.html

Re: PuTTY 0.68 has been released

#49
post #40

I wish they would finally implement file transfers via copy/paste mechanism inside an active terminal window. As far as I know this feature would be unique across platforms. If someone does know of an SSH terminal client that does this, please reply.

How about dragging to the terminal? This is a feature of mobaxterm. Upon ssh'ing to a system, a sftp session is automatically opened as well.

Re: PuTTY 0.68 has been released

#50
post #40

I wish they would finally implement file transfers via copy/paste mechanism inside an active terminal window. As far as I know this feature would be unique across platforms. If someone does know of an SSH terminal client that does this, please reply.

EDIT: Realized you wanted to paste a file, instead of drop a file. I'm not really aware of anything that manages that.

This page[1] says SecureCRT can do it, and I saw some things referencing that Konsole can too. I searched for 'drag and drop zmodem' to get started.

[1] https://www.vandyke.com/support/tips/dragdropft.html

Post reply on HN