News for hackers. Stuff that matters.

A comment on Launch HN: Termius (YC W19) – SSH client that works on desktop and mobile. Parent comment

Re:Launch HN: Termius (YC W19) – SSH client that works on de... by __david__ on Friday June 07, 2019 @06:27AM (#20123180)
> …SSH keys in ~/.ssh are also plain text.

What? Mine aren't, nor have they ever been…

If you are storing ssh private keys on disk without a password you are doing something wrong.

[ Parent | on HN ]
Re:Launch HN: Termius (YC W19) – SSH client that works on de... by icebraining on Friday June 07, 2019 @06:45AM (#20123260)
If someone can read the files in .ssh, chances are they can also add an alias to the ssh command that steals your passphrase. As for the "stolen laptop" scenario, whole disk encryption is preferable.
[ Parent | on HN ]