4 ms·

Yea you really only need the contents of ~/.ssh and you could access every server the laptop could. Even if they didn't have production access, a lot of times

Yea you really only need the contents of ~/.ssh and you could access every server the laptop could. Even if they didn't have production access, a lot of times servers are configured to easily hop from one to another. They could have connected to a development server and then just hopped to the DB server with the accounts it seems they were looking for.

knweiss 14y ago
That's why you should use ssh-agent and protect your private key with a passphrase.
- 0x0 14y ago
  It's useful, but if an attacker got a shell on the dev laptop, I assume he could just coredump the ssh-agent process and steal the unlocked key from there.