News for hackers. Stuff that matters.
Re:Show HN: Caddy-SSH by staticassertion on Wednesday March 30, 2022 @02:32PM (#30859023)
You're not on my machine. You're on the server. You still don't have my private key.
Re:Show HN: Caddy-SSH by LinuxBender on Wednesday March 30, 2022 @04:01PM (#30860101)
What I described above puts me on your machine. This is not theory, it has been tested against many people. Legally of course.
Re:Show HN: Caddy-SSH by staticassertion on Wednesday March 30, 2022 @05:05PM (#30860762)
So you were vague about where I execute the script. If I execute the script on my client, obviously you have my key, but that's not interesting. If I execute the script on my server, you do not have my private key, period.

This whole "I can ssh back to your machine past your firewall" is not a thing I understand, I am not aware of that capability in SSH.