Thread

1. 3dedb728-3f77 · 1785727851 · focus · HN ↗

   Hey, is it not just a simple honeypot reverse hack ssh server?

   People understand that reverse hacking can happen when connecting to random ssh server, right?

   1. applfanboysbgon · 1785728889 · focus · HN ↗

      What exactly is the mechanism by which you think that an SSH RCE is "simple"?

      1. dlgeek · 1785729120 · focus · HN ↗

         Not OP, but agent forwarding is a significant concern.

         1. SXX · 1785744351 · focus · HN ↗

            Is it enabled by default though?

            AFAIK: No

            1. jamie0 · 1785748135 · focus · HN ↗

               It's not, but there is likely a small number people who have something like this configured:

                 Host *
                 ForwardAgent yes

Unofficial Hacker News client; not affiliated with Y Combinator.