Hmm, I would think scp would be way more secure if he can shell into both sessions? idk. There's probably a perfect use case out there somewhere. Still a neat trick, heck you could probably do it with any service, not just DNS, cause you're basically just capturing traffic to receive it...