Followup on Inquiry about regreSSHion postmortem

Martin Paljak martin at martinpaljak.net
Thu Aug 21 06:39:03 AEST 2025


This does in fact redirect as described.

> On 20. Aug 2025, at 23:02, hvjunk <hvjunk at gmail.com> wrote:
> 
>> 
>> https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/log.c.diff?ipk=fF83_JCDCKqCJ85QEwn7jbP5Ag2cF3ZCTZ6QbjGp4RE&r1=1.52&r2=1.53&f=h
>> 
>> Redirects your browser via 301 to https://theannoyingsite.com/
> 
> don’t know where you get that, unless your own browser is compromised, and I pointed you to the direct source to show you your malice.. apologies you’ve now brainwashed me .. your stupidity/insanity of not investigating and asking the right questions before jumping on the blame game bandwagon… 


$ wget -S 'https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/log.c.diff?ipk=fF83_JCDCKqCJ85QEwn7jbP5Ag2cF3ZCTZ6QbjGp4RE&r1=1.52&r2=1.53&f=h'
--2025-08-20 23:31:17--  https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/log.c.diff?ipk=fF83_JCDCKqCJ85QEwn7jbP5Ag2cF3ZCTZ6QbjGp4RE&r1=1.52&r2=1.53&f=h
Resolving cvsweb.openbsd.org (cvsweb.openbsd.org)... 128.100.17.243
Connecting to cvsweb.openbsd.org (cvsweb.openbsd.org)|128.100.17.243|:443... connected.
HTTP request sent, awaiting response...    HTTP/1.1 301 Moved Permanently
  Connection: close
  Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline';
  Content-Type: text/html
  Date: Wed, 20 Aug 2025 20:31:18 GMT
  Location: https://theannoyingsite.com/
  Server: OpenBSD httpd
  Transfer-Encoding: chunked
Location: https://theannoyingsite.com/ [following]
--2025-08-20 23:31:18--  https://theannoyingsite.com/
Resolving theannoyingsite.com (theannoyingsite.com)... 50.116.11.184
Connecting to theannoyingsite.com (theannoyingsite.com)|50.116.11.184|:443... connected.
HTTP request sent, awaiting response... No data received.






More information about the openssh-unix-dev mailing list