News for hackers. Stuff that matters.

A comment on An SSH server that knows who you are.

Re:An SSH server that knows who you are by leowoo91 on Monday February 17, 2020 @02:48AM (#22346194)
I wonder how does it match my public key at github? Does it use a popular accounts index, or maybe he crawled a bit?
[ Parent | on HN ]
Re:An SSH server that knows who you are by guessmyname on Monday February 17, 2020 @04:26AM (#22346507)
> I wonder how does it match my public key at github?

> Does it use a popular accounts index, or maybe he crawled a bit?

Ben Cartwright-Cox (aka. benjojo) [1] crawled many “github.com/USERNAME.keys” some time ago [2].

Filippo, being colleagues, probably asked for a copy of his database to run this experiment.

For example, here are the public SSH keys Linus Torvalds uses on GitHub [3].

[1] https://github.com/benjojo

[2] https://blog.benjojo.co.uk/post/auditing-github-users-keys

[3] https://github.com/torvalds.keys

[ Parent | on HN ]