3 ms·
Not sure, but it's basically about how you shouldn't SSH from compromised machines because those can have "ControlMaster auto" in OpenSSH config to by pass auth
by emj 7y ago
Not sure, but it's basically about how you shouldn't SSH from compromised machines because those can have "ControlMaster auto" in OpenSSH config to by pass authentication to the hosts you SSH to. That means the next time you SSH from that compromised host they will open another connection without having to use a password.
- inetknght 7y agoIt's also about how users should be aware of malware injecting themselves by use of an alias.
- vertex-four 7y agoOf course, if you SSH from a compromised host, it could also just piggyback on your terminal session, or steal your credentials, or whatever else. This is really an instance of being on the other side of the airtight hatchway: https://devblogs.microsoft.com/oldnewthing/20181219-00/?p=100515 https://devblogs.microsoft.com/oldnewthing/20181219-00/?p=10...