12 ms·
If you're trying to maintain anonymity, why is your username your real name?
by glandium 10y ago
If you're trying to maintain anonymity, why is your username your real name?
- sillysaurus3 10y agoEven if it's not, your default hostname when using a MacBook Pro is typically "<username>s-MacBook-Pro.local" which reveals you're using a MacBook Pro. That info leak probably doesn't matter, but generally you want to reveal as little information as possible.
- nitrogen 10y agoAs one example, a hostname leak might hypothetically be useful for a spearfishing+XSS attack.
- acranox 10y agoWhat kind of person cares enough about anonymity to change the comment in their ssh key, but not change the default hostname of their Mac? That person is very inconsistent.
- minitech 10y agoWhy does ssh-keygen include unnecessary information by default?
- throwaway7767 10y agoBecause it helps usability when the user is editing ~/.ssh/authorized_keys - if the default is not changed, the key comment has some context, so finding the right key is easier. I strip comments from my SSH keys too for the same reason you do. But most people don't seem to care and there is a reason for the default.
- deleted 10y ago[deleted]
- tokenizerrr 10y agoHardly unnecessary. Very useful to see which key is what when you have multiple.
- Esau 10y agoYour right. I just checked mine and it was: esau@europa.hsd1.fl.comcast.net Not a big deal but it does reveal my ISP and state.