[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: doing an ssh into a compromised host



also sprach Dariush Pietrzak <eyck@forumakad.pl> [2004.11.02.1053 +0100]:
>  hmm, but in /tmp/ssh* there's just a socket... so when agent is gone, what
> good is that file?

Fine, so the other hosts are only accessible while you are logged
in. Should be enough to hijack them...

-- 
Please do not send copies of list mail to me; I read the list!
 
 .''`.     martin f. krafft <madduck@debian.org>
: :'  :    proud Debian developer, admin, user, and author
`. `'`
  `-  Debian - when you have better things to do than fixing a system
 
Invalid/expired PGP subkeys? Use subkeys.pgp.net as keyserver!

Attachment: signature.asc
Description: Digital signature


Reply to: