News for hackers. Stuff that matters.

A comment on Bypassing Authentication on SSH Bastion Hosts.

Re:Bypassing Authentication on SSH Bastion Hosts by wolf550e on Tuesday November 12, 2019 @01:49PM (#21516855)
Why not a patch to openssh to disable multiplexing on the server? At least as an option.
[ Parent | on HN ]
Re:Bypassing Authentication on SSH Bastion Hosts by aidenn0 on Tuesday November 12, 2019 @02:43PM (#21517361)
TFA mentions the already existent option for doing exactly that.
[ Parent | on HN ]
Re:Bypassing Authentication on SSH Bastion Hosts by wolf550e on Tuesday November 12, 2019 @03:08PM (#21517603)
so is "MaxSessions 1" the correct fix if you can use it?
[ Parent | on HN ]
Re:Bypassing Authentication on SSH Bastion Hosts by aidenn0 on Tuesday November 12, 2019 @07:00PM (#21519603)
It closes the easiest hole, but there are still plenty of other vectors.
[ Parent | on HN ]