News for hackers. Stuff that matters.

A comment on Rtty – Access a device’s terminal from anywhere via the web. Parent comment

Re:Rtty – Access a device’s terminal from anywhere via the web by dTal on Tuesday February 04, 2020 @06:11AM (#22234312)
You might be on a hostile, locked down client, on a hostile network. This lets you access a *nix machine you control from no more than an internet kiosk at a hotel.
[ Parent | on HN ]
Re:Rtty – Access a device’s terminal from anywhere via the web by precurse on Tuesday February 04, 2020 @09:31AM (#22235878)
I definitely would not want to use a hostile machine to access my servers remotely, period. Sure, this will let you bypass outbound port restrictions, but it doesn't help in the slightest if every keystroke is keylogged.
[ Parent | on HN ]
Re:Rtty – Access a device’s terminal from anywhere via the web by Fnoord on Tuesday February 04, 2020 @09:49AM (#22236091)
Keystrokes being logged could be avoided with 2FA plus not typing in sensitive content.

That doesn't secure you against MITM from the machines. E.g. if the machine is taken over locally or remotely or there's spyware running on it, you could still end up compromised.

(I'm not saying you should do this; you probably shouldn't.)

[ Parent | on HN ]