> Maybe this was always clear, but along with that reassurance I guess
> you would recommend we all take your stated remedial action :
> [place] the following directive in sshd_config and ssh_config:
> "Ciphers aes128-ctr,aes256-ctr,arcfour256,arcfour,aes128-cbc,aes256-cbc"
> at the very next ...

[ more ]