Re:Why you should never use Upwork
by oarsinsync on Monday October 24, 2016 @07:35AM
(#12777970)
> What if you accidentally revealed a private key on the screen during the screenshot?
You replace the private key with a new one that hasn't been compromised.
> Are you willing to forfeit 10 minutes of time to keep your SSH or whatever else uncompromised?
Too late, it already is.
> Or are you going to trust Upwork and your client to not somehow leak it, even accidentally?
See above. You've already leaked it, it is now compromised and needs replacing. It sucks, but if you adopt a different approach, you're risking a lot of trouble down the road. Private keys are private. The moment you leak it, accidentally or otherwise, it's no longer private and should be replaced.
You replace the private key with a new one that hasn't been compromised.
> Are you willing to forfeit 10 minutes of time to keep your SSH or whatever else uncompromised?
Too late, it already is.
> Or are you going to trust Upwork and your client to not somehow leak it, even accidentally?
See above. You've already leaked it, it is now compromised and needs replacing. It sucks, but if you adopt a different approach, you're risking a lot of trouble down the road. Private keys are private. The moment you leak it, accidentally or otherwise, it's no longer private and should be replaced.