4 ms·
> When you ssh into a remote server as a client, afaik that server cannot execute arbitrary code on the client. ...assuming you have X11 forwarding disabled an
by inetknght 2y ago
> When you ssh into a remote server as a client, afaik that server cannot execute arbitrary code on the client.
...assuming you have X11 forwarding disabled and/or don't have X11 server running on the same system that your client is running on.
- yjftsjthsd-h 2y agoI'm pretty sure X11 forwarding is opt-in, not opt-out? That is, if you don't run `ssh -X` or -Y then this isn't a problem
- uecker 2y agoUsually it should also not be problem with -X because then the client is not trusted (but some distributions change the defaults here because some clients then don't work properly! unfortunately, there is not much interest in fixing this since two decades because X is dead anyway or so)
- awwaiid 2y agoIf I have X11 forwarding on, what can Evil apps do? Launch UI for sure. Screenshots? I imagine so. What else? Send keyboard events, which would be game over?