AcceptEnv LANG LC_* vs available locales

Christoph Anton Mitterer calestyo at scientia.org
Tue May 3 05:07:42 AEST 2022


On Sat, 2022-04-30 at 03:36 -0400, Demi Marie Obenour wrote:
> The only remaining
> problem is client-side state being messed up, and the easiest
> solution
> to that is to destroy the PTY once the session is complete.

It's not only messing up. Consider you have copied some of your
passphrases into the clipboard, and a remote server can read it out via
some terminal command.

Cheers,
Chris.


More information about the openssh-unix-dev mailing list