Which qube do you SSH from?

Is ssh-ing into a remote system a security risk for the qube you’re ssh-ing from since you’re establishing a network connection from it?

There were some known vulnerabilities of the ssh clients when connecting to a rogue server.

If you ssh into non trustable systems, do it from a disposable.

3 Likes

Disposables. Why didn’t I think of that. Thank you.

1 Like

Yes, there are risks associated with acting as a client. I exclude
vulnerabilities relating to weak handling of keys and a compromised
qube.
There are also risk from the network, particularly risk of de
anonymising you.
Many risks will be dependent on the security of the server that you ssh
in to: you can mitigate against these by using a strong client
configuration and ensuring that the client is up to date.

I never presume to speak for the Qubes team. When I comment in the Forum I speak for myself.