Linux

12291 readers

66 users here now

Welcome to c/linux!

Welcome to our thriving Linux community! Whether you're a seasoned Linux enthusiast or just starting your journey, we're excited to have you here. Explore, learn, and collaborate with like-minded individuals who share a passion for open-source software and the endless possibilities it offers. Together, let's dive into the world of Linux and embrace the power of freedom, customization, and innovation. Enjoy your stay and feel free to join the vibrant discussions that await you!

Rules:

Stay on topic: Posts and discussions should be related to Linux, open source software, and related technologies.
Be respectful: Treat fellow community members with respect and courtesy.
Quality over quantity: Share informative and thought-provoking content.
No spam or self-promotion: Avoid excessive self-promotion or spamming.
No NSFW adult content
Follow general lemmy guidelines.

founded 2 years ago

MODERATORS

MigratingtoLemmy@lemmy.world

SSH backdoor infection (lemmy.world)

submitted 3 days ago by IronJumbo@lemmy.world to c/linux@lemmy.world

6 comments fedilink hide all child comments

https://blog.thc.org/infecting-ssh-public-keys-with-backdoors

I am not a security expert and I wonder:

Does the described method infect the remote or local machine (from which I connect)?
Can this method be prevented? For example, correctly configuring your etc/ssh/ssh_config

It seems that every VPS supplier can hack you? The description shows that AWS does "harmless", but what if my hosting is a bad actor?

you are viewing a single comment's thread
view the rest of the comments

[–] treadful@lemmy.zip 5 points 3 days ago

OpenSSH has an unsung feature to execute a command (instead of a Shell) when a user successfully logs in.

It's remote.

Also, it's not really that exciting. They already would need access to your account. It would be very obvious when copying it as well.