Highly recommended to read the original but TLDR;

Stealth found a SSH 2 --> 1 downgrade that would not display the warning in case of a MITM. At CCC, German hacker conf, they MITM'd all SSH for 20 mins, getting SSH creds. Just before being discovered, they…