> People understand that reverse hacking can happen when connecting to random ssh server, right?

No, actually, I've never heard of such a vector. How would that work?

jerrythegerbil an hour ago | parent | next [-]

An ssh server would exploit a vulnerability in the ssh client when it connects.

For example, openssh has both a client and server. There’s been vulnerabilities in openssh, in the client. Those vulnerabilities aren’t reachable unless you’re connecting to a server attempting to exploit you, so the risk is quite low because you know and trust most servers you’re connecting to with ssh.

To sum it up: Connecting to this server is probably fine, but in doing so most people are doing something significantly riskier without realizing it.

	▲	teiferer 10 minutes ago \| parent \| next [-]
		> To sum it up: Connecting to this server is probably fine And what are you basing this statement on?
	▲	applfanboysbgon 5 minutes ago \| parent \| prev [-]
		There has never been a real-world OpenSSH exploit that allows a server to RCE a client that connected to it without a bunch of dubious qualifiers. Connecting to a random SSH server is much, much less dangerous than running a random binary or executing a random curl install script, both of which people do all the time, and is probably about on par with the likelihood of a random website escaping your browser's sandbox and RCEing you.

▲

krautsauer an hour ago | parent | prev [-]

Vulnerability in your ssh client (unlikely) or terminal emulator (more common but lower reach).