News for hackers. Stuff that matters.

A comment on Ask HN: What are the best practises for using SSH keys?. Parent comment

Re:Ask HN: What are the best practises for using SSH keys? by nothrabannosir on Sunday September 25, 2016 @07:55AM (#12574938)
the same holds for keys with passphrases; the attacking process just has to wait until you enter it.
[ Parent | on HN ]
Re:Ask HN: What are the best practises for using SSH keys? by berdario on Sunday September 25, 2016 @08:40AM (#12575082)
As I mentioned in my other comment: stealing local files does not necessarily have to happen via unrestricted-RCE (which would allow you access to the ssh agent)
[ Parent | on HN ]
Re:Ask HN: What are the best practises for using SSH keys? by Godel_unicode on Sunday September 25, 2016 @12:02PM (#12575860)
This, for instance.

http://m.theregister.co.uk/2013/01/25/github_ssh_key_snafu/

[ Parent | on HN ]