Protecting sshd using spiped

Re:Protecting sshd using spiped by ZoFreX on Thursday August 30, 2012 @11:20AM (#4455017)

Worst case scenario, there's an exploit that punches through spiped. Now you can connect to SSH in the usual manner.

As far as I can see, in the absolute worst case scenario, you end up in an equivalent position to not running spiped at all - it adds, it does not subtract. It's like putting a second locked door in front of the front door to your house - if someone bypasses it, it doesn't make the other door less secure.

[ Parent | on HN ]

Re:Protecting sshd using spiped by alexchamberlain on Thursday August 30, 2012 @11:27AM (#4455060)

I agree, but it could give a false sense of security to a novice.

What if they set up `spiped` and password authentication?

Also, once they get to `spiped` they are on your system. If there is a whole to run arbitrary commands from `spiped`, you're stuffed.

[ Parent | on HN ]

Re:Protecting sshd using spiped by ZoFreX on Thursday August 30, 2012 @11:29AM (#4455070)

> If there is a whole to run arbitrary commands from `spiped`, you're stuffed.

Oh, duh, of course. Forget what I said before. Unless you're running spiped in a separate VM or jail.

[ Parent | on HN ]