3 ms·
Worst case scenario, there's an exploit that punches through spiped. Now you can connect to SSH in the usual manner. As far as I can see, in the absolute worst
by ZoFreX 14y ago
Worst case scenario, there's an exploit that punches through spiped. Now you can connect to SSH in the usual manner.
As far as I can see, in the absolute worst case scenario, you end up in an equivalent position to not running spiped at all - it adds, it does not subtract. It's like putting a second locked door in front of the front door to your house - if someone bypasses it, it doesn't make the other door less secure.
- alexchamberlain 14y agoI agree, but it could give a false sense of security to a novice. What if they set up `spiped` and password authentication? Also, once they get to `spiped` they are on your system. If there is a whole to run arbitrary commands from `spiped`, you're stuffed.
- ZoFreX 14y ago> If there is a whole to run arbitrary commands from `spiped`, you're stuffed. Oh, duh, of course. Forget what I said before. Unless you're running spiped in a separate VM or jail.