News for hackers. Stuff that matters.

A comment on New startup sells coffee through SSH. Parent comment

Re:New startup sells coffee through SSH by thih9 on Wednesday May 01, 2024 @04:51PM (#40229249)
This is only a threat if you enable agent forwarding for all hosts.

If you enable agent forwarding for all hosts then yes, data will be forwarded.

Your link says:

> Don’t enable agent forwarding when connecting to untrustworthy hosts. Fortunately, the ~/.ssh/config syntax makes this fairly simple

[ Parent | on HN ]
Re:New startup sells coffee through SSH by binkHN on Wednesday May 01, 2024 @06:44PM (#40230556)
Like you noted, ForwardAgent no is the default in /etc/ssh/ssh_config.
[ Parent | on HN ]