News for hackers. Stuff that matters.
Re:SSH agent extensions as an arbitrary RPC mechanism by dijit on Friday June 14, 2024 @05:13AM (#40679054)
UNIX Sockets are more flexible than named pipes;

* You can use them for more than two processes communicating (eg. a server process with potentially multiple client processes connecting);

* They are bidirectional;

* They support passing kernel-verified UID / GID credentials between processes;

* They support passing file descriptors between processes;

* They support packet and sequenced packet modes.

TCP only grants you 2 of these extra features (sequenced packet mode/bidirection), leaving a giant hole in security in the process.

Re:SSH agent extensions as an arbitrary RPC mechanism by Joker_vD on Friday June 14, 2024 @07:51AM (#40679920)
The named pipes, at least on Windows, also support all of that except for passing UID/GID and file handles.