News for hackers. Stuff that matters.

A comment on Bypassing Authentication on SSH Bastion Hosts. Parent comment

Re:Bypassing Authentication on SSH Bastion Hosts by emj on Tuesday November 12, 2019 @01:57PM (#21516945)
Not sure, but it's basically about how you shouldn't SSH from compromised machines because those can have "ControlMaster auto" in OpenSSH config to by pass authentication to the hosts you SSH to. That means the next time you SSH from that compromised host they will open another connection without having to use a password.
[ Parent | on HN ]
Re:Bypassing Authentication on SSH Bastion Hosts by vertex-four on Tuesday November 12, 2019 @02:37PM (#21517307)
Of course, if you SSH from a compromised host, it could also just piggyback on your terminal session, or steal your credentials, or whatever else. This is really an instance of being on the other side of the airtight hatchway: https://devblogs.microsoft.com/oldnewthing/20181219-00/?p=10...
[ Parent | on HN ]
Re:Bypassing Authentication on SSH Bastion Hosts by inetknght on Tuesday November 12, 2019 @02:07PM (#21517040)
It's also about how users should be aware of malware injecting themselves by use of an alias.
[ Parent | on HN ]