Shoot, you are correct. Definitely an attack vector. The connection is to the same TTY when I log in via the web terminal and SSH at the same time, so if you a

Shoot, you are correct. Definitely an attack vector. The connection is to the same TTY when I log in via the web terminal and SSH at the same time, so if you are logged in via LISH anyone with the LISH password has access to the logged in user's console + scrollback. I wasn't able to send BRK from Putty though.