Comments on: Internet Census, 2016.

By: Mircea Popescu

Mircea Popescu — Wed, 04 Jan 2017 23:11:14 +0000

Good to know, thanks.

By: nobody

nobody — Wed, 04 Jan 2017 23:10:32 +0000

OpenSSH 7.4 was released 2016-12-19, so yes 4 days after this article was published.

OpenSSH 7.3 was released 2016-08-01. From what I understand the data this study is based on was collected June-July, which makes the presence of 7.3 SSH servers very strange (maybe you connected to some test servers run by the OpenSSH devs or something like that?)

OpenSSH 7.2p2 was released 2016-03-10 and so should be considered current here. It apparently ran at the time on less than 1% of machines.

The security updates from 7.2p2 to 7.4 are important : timing attack weaknesses, CVE-2015-8325, various DoS avenues etc.

By: anon

anon — Wed, 04 Jan 2017 22:59:51 +0000

Ahaha lolwut, 7.3 present on 21 machines out of 15 million?

By: Mircea Popescu

Mircea Popescu — Wed, 04 Jan 2017 22:53:51 +0000

Ah, thanks for the clarification.

Of course, this was published December 15th, so do you mean days before ?

By: df

df — Wed, 04 Jan 2017 20:12:35 +0000

Current version is 7.4, released in December, 4 days after publishing this article. Before that 7.3 was the newest, not 7.7.