| ▲ | 3dedb728-3f77 3 hours ago |
| Hey, is it not just a simple honeypot reverse hack ssh server? People understand that reverse hacking can happen when connecting to random ssh server, right? |
|
| ▲ | scubbo 2 hours ago | parent | next [-] |
| > People understand that reverse hacking can happen when connecting to random ssh server, right? No, actually, I've never heard of such a vector. How would that work? |
| |
| ▲ | jerrythegerbil an hour ago | parent | next [-] | | An ssh server would exploit a vulnerability in the ssh client when it connects. For example, openssh has both a client and server. There’s been vulnerabilities in openssh, in the client. Those vulnerabilities aren’t reachable unless you’re connecting to a server attempting to exploit you, so the risk is quite low because you know and trust most servers you’re connecting to with ssh. To sum it up: Connecting to this server is probably fine, but in doing so most people are doing something significantly riskier without realizing it. | | |
| ▲ | teiferer 9 minutes ago | parent | next [-] | | > To sum it up: Connecting to this server is probably fine And what are you basing this statement on? | |
| ▲ | applfanboysbgon 5 minutes ago | parent | prev [-] | | There has never been a real-world OpenSSH exploit that allows a server to RCE a client that connected to it without a bunch of dubious qualifiers. Connecting to a random SSH server is much, much less dangerous than running a random binary or executing a random curl install script, both of which people do all the time, and is probably about on par with the likelihood of a random website escaping your browser's sandbox and RCEing you. |
| |
| ▲ | krautsauer an hour ago | parent | prev [-] | | Vulnerability in your ssh client (unlikely) or terminal emulator (more common but lower reach). |
|
|
| ▲ | bulbar 2 hours ago | parent | prev | next [-] |
| Is that more likely than getting hacked when visiting a website? |
| |
| ▲ | jolmg an hour ago | parent [-] | | Visiting a random website is the normal use of HTTP. With SSH, there might be assumptions of connecting to a trusted server you have an account with and likely own. It's not very normal to ssh to a random server. | | |
| ▲ | teiferer 7 minutes ago | parent [-] | | > likely own I don't know how you are using ssh, but most ssh servers that I have connected to in my life, and still do, I don't own. Some of them I barely trust. |
|
|
|
| ▲ | applfanboysbgon 2 hours ago | parent | prev [-] |
| What exactly is the mechanism by which you think that an SSH RCE is "simple"? |
| |
