News for hackers. Stuff that matters.
Re:Rsync client-side arbitrary file write vulnerability by blueflow on Thursday August 04, 2022 @05:24AM (#32340866)
https://www.openssh.com/txt/release-9.0 :

> This release switches scp(1) from using the legacy scp/rcp protocol to using the SFTP protocol by default.

From the scp(1) manpage:

> -O: Use the original SCP protocol for file transfers instead of the SFTP protocol. Forcing the use of the SCP protocol may be necessary for servers that do not implement SFTP, for backwards-compatibility for particular filename wildcard patterns and for expanding paths with a ‘~’ prefix for older SFTP servers. This mode is the default.

There are no comments on this comment yet.