@michael@westergaard.social @xrobau@mastodon.au (Regarding the MikroTik vulnerability mentioned recently): As far as I can tell: - if you don't use RSA keys, there is no problem - if you use RSA keys generated with the commonest exponent, 65537, there is no problem (ssh-keygen uses 65537) - if you don't use public keys, there is no problem (except that you are not using public keys :-) ) - if the public key you use is not known to the attacker, there is no problem - if the MikroTik device is not reachable by the attacker, there is no problem