Problem:
- macOS (14.2.1) ssh (OpenSSH_9.4p1, LibreSSL 3.3.6) is vulnerable to Terrapin attack (as reported by the scanner).
- The regular OpenSSH (e.g. via Homebrew) doesn't support the
UseKeychainoption
Workaround:
- Automator > new Application > Run Shell Script:
~/bin/login-script, save asLogin script.app - Create a new file
~/bin/login-scriptwith contents: