3 ms·
For a prospective hacker, I don't think there's much of a (functional) difference between a graphical interface or a shell.
by dvt 10y ago
For a prospective hacker, I don't think there's much of a (functional) difference between a graphical interface or a shell.
- tobltobs 10y agoI think he is talking about unnecessary additional attack vectors, not about functionality.
- developer2 10y agoThe attack surface for a web application like phpmyadmin is the entire codebase of that application. The attack surface for mysql over an ssh tunnel is basically only the sshd daemon and its authentication configuration. I think most people would agree which one exposes a greater likelihood of being hacked. Of course you can secure a phpmyadmin installation against even being accessed by attackers (I've done this in the past myself), but there is still a chance of such security measures being accidentally botched compared to the sshd configuration. I don't feel strongly either way, if you are confident that your security measures on a phpmyadmin installation are solid. I for one, security audit or not, would never expose a phpmyadmin installation on a publicly accessible URL.