5 ms·
It could be a manual script that he runs which prompts for the passphrase. I know that earlier in Linode's history, caker made it seem as if it worked that way
by cmelbye 14y ago
It could be a manual script that he runs which prompts for the passphrase. I know that earlier in Linode's history, caker made it seem as if it worked that way from the way he acted in their IRC channel when the batch transactions were running.
- eridius 14y agoThis seems likely. Once a month, run a script, type in the complex passphrase, and all the billing gets done at once.
- thaumaturgy 14y agoI mentioned this elsethread, but I've had changes to my account get charged to my card immediately (within minutes), even in the middle of the night. Last example of this was January 2012, so they may've changed their billing practices since then.
- eridius 14y agoI suppose they could also keep the decrypted key in memory using something like gpg-agent.
- stock_toaster 14y agoI read somewhere (can't remember where now) that the hacker supposedly dumped the key from memory. My guess is they type in the passphrase on boot or something, and it lives in an agent thereafter.
- eridius 14y agoI haven't seen that anywhere, and I find it unlikely.