4 ms·
There are many points made in the presentation, including that a significant number of ~~targets~~ hosts are not running OpenSSH. See the list and the claims th
by fn-mote 2y ago
There are many points made in the presentation, including that a significant number of ~~targets~~ hosts are not running OpenSSH. See the list and the claims that some classes of them are important.
The swipe at "running shell commands" isn't very credible, but the second attack surface is legitimate.
- hello_computer 2y ago4th bullet from the bottom sounds credible to me: > Supports the execution of shell commands on behalf of valid SPA packets. Even if it were only a statically configured command (no idea if it is or isn't), as soon as that door is opened, it leads to a morass.