3 ms·
I agree except if a non-root user I don't know about is binding to any ports from inside then I'm already hosed.
by noir_lord 8y ago
I agree except if a non-root user I don't know about is binding to any ports from inside then I'm already hosed.
- noja 8y agoA non-root user might not be a person, it might be a compromised php script.
- noir_lord 8y agoTrue but if my system has a compromised anything binding to a port then they can talk to it via whatever they want at that point. I'm of the opinion that if an attacker gets a local account then I'm already hosed given the regularity of local privilege escalation CVE's