News for hackers. Stuff that matters.
Re:Bypassing Authentication on SSH Bastion Hosts by __david__ on Wednesday November 13, 2019 @01:16AM (#21521556)
I don’t believe ssh multiplexing talks to the ssh agent. That’s the whole point, really. You just connect through an already authorized ssh connection. This eliminates the initial key handshake stuff at the beginning and makes subsequent ssh and scp connections really fast.

If I’m correct, your mitigation doesn’t affect this particular kind of attack.

Re:Bypassing Authentication on SSH Bastion Hosts by Piskvorrr on Wednesday November 13, 2019 @05:19AM (#21522604)
You are correct. SSH multiplexing sockets use no authentication whatsoever: the assumption is "if it's up, the user already did that before."