Problem:
- macOS (14.2.1) ssh (OpenSSH_9.4p1, LibreSSL 3.3.6) is vulnerable to Terrapin attack (as reported by the scanner).
- The regular OpenSSH (e.g. via Homebrew) doesn't support the
UseKeychain
option
Workaround:
- Automator > new Application > Run Shell Script:
~/bin/login-script
, save asLogin script.app
- Create a new file
~/bin/login-script
with contents: