Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

What exactly is the mechanism by which you think that an SSH RCE is "simple"?


Not OP, but agent forwarding is a significant concern.


Is it enabled by default though?

AFAIK: No


It's not, but there is likely a small number people who have something like this configured:

  Host *
  ForwardAgent yes




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: