3 ms·
Oh, I've seen it plenty times when users want to SSH from server A to server B, they copy their private key from their workstation to server A.
by 3np 6y ago
Oh, I've seen it plenty times when users want to SSH from server A to server B, they copy their private key from their workstation to server A.
- systemvoltage 6y agoOh boy... I need to step out into the wilderness more :-D
- bsder 6y agoUrk. Wow. The bigger issue is "Don't copy a private key. Ever. Period." How would you even do this? Don't the various private key containers make this quite difficult?
- chrisan 6y agoIt is just plain text in linux. Nothing hard to copy about it
- midasuni 6y agoA natural consequence of server admins disabling ssh agent forwarding. All these “security truisms” tend to ignore the real world. When you remove features, people will work around it in a less secure way.
- deleted 6y ago[deleted]
- deckard1 6y agoA result of people not understanding how public/private keys work. They just want it to work, and copy everything over to get what they want done. These same people probably also joke about the marketing folks down the hall leaving post-it notes with their password on their monitor. Security is the first casualty in the battle for convenience.