Hacker News Reader

Sage advice. This is really more suited to IRC but ssh is something everyone has readily available. It has a much lower barried to entry. Isn't a specific effort required to have [port] forwarding? I don't think anyone will do it accidentally, even were I nefarious. In other words, if you don't know what "forwarding" is, then you don't have to worry.

View on HN

nono ssh is great medium, just most people have agent forwarding by default, and its annoying that it can be exploited by malicious ssh host[1]

[1]: https://book.hacktricks.xyz/linux-unix/privilege-escalation/...

That's a great resource. I had never heard of this attack vector before. Thanks for sharing the link.

Reply on news.ycombinator.com