Re:Rsync client-side arbitrary file write vulnerability
by Koenvh on Tuesday August 02, 2022 @11:08AM
(#32319507)
I do trust my own server not to misbehave, but I probably would not trust some random server on the internet.
Re:Rsync client-side arbitrary file write vulnerability
by bragr on Tuesday August 02, 2022 @12:25PM
(#32320769)
I've had personal servers compromised. I don't unconditionally trust them either.
Re:Rsync client-side arbitrary file write vulnerability
by ksbrooksjr on Tuesday August 02, 2022 @03:03PM
(#32322916)
Exactly. I'm usually worried about the opposite scenario (the client infecting the server). If you're copying files from a personal computer it might have all sorts of random software running on it that's accumulated over the years. Whereas on a remote server you tend to have a better security posture, and aren't installing random software and apps. Admittedly, that might just be my personal use case though.
Why would you ever trust the server not to do bad things?