3 ms·
make sure one's ssh-agent forwarding is off when connecting to strange hosts :)
by exabrial 5y ago
make sure one's ssh-agent forwarding is off when connecting to strange hosts :)
- arsome 5y agoAlso make sure you're not exposing an identifying public key to a service you intended to use anonymously.
- jart 5y agoAre you telling me that everyone who clones a repo from GitHub via SSH is in fact authorizing GitHub to use their private key? Why hasn't anyone made a slick web page with a catchy name like AuthBleed or SecretAgent to describe that one yet?
- exabrial 5y agoThe default OpenSSH settings are safe. You have to explicitly whitelist servers or domains in `.ssh/config`, but if you were to blatantly blast: Host * ForwardAgent yes The scenario you talk about is certainly possible, especially since OpenSSH does not require a "tap" for each authorization once the agent is unlocked. (Side note: this is one thing hardware u2f keys absolutely got correct).