Show HN: Apply for a job through SSH, $ ssh jobs.hackclub.com

Re:Show HN: Apply for a job through SSH, $ ssh jobs.hackclub... by dumpsterdiver on Tuesday May 18, 2021 @01:39AM (#27191570)

If I had two servers allowing ssh, and you logged into one of them by providing a public key which I added to the authorized_keys file, it would be a good guess that it was still you if you logged into my second server the same way.

Is that what you’re trying to say?

Granted it still wouldn’t prove it, because we are not our ssh keys. We’re all potentially one malware infection away from having our private keys compromised. Also, if someone wanted to "shed" the identity associated with a public key they could always just "accidentally" leak the private key in a public git commit.

[ Parent | on HN ]

Re:Show HN: Apply for a job through SSH, $ ssh jobs.hackclub... by thaumasiotes on Tuesday May 18, 2021 @02:02AM (#27191673)

> Also, if someone wanted to "shed" the identity associated with a public key they could always just "accidentally" leak the private key in a public git commit.

That would allow anyone to prove that they owned the public key, which prevents the original owner from using it. But it seems like, if you want to stop using the key, it's simpler to just stop using it. What does leaking the private key accomplish that deleting the private key doesn't also accomplish?

[ Parent | on HN ]

Re:Show HN: Apply for a job through SSH, $ ssh jobs.hackclub... by dumpsterdiver on Tuesday May 18, 2021 @02:55AM (#27191913)

Plausible deniability.

[ Parent | on HN ]

Re:Show HN: Apply for a job through SSH, $ ssh jobs.hackclub... by thaumasiotes on Tuesday May 18, 2021 @04:42PM (#27200785)

How?

[ Parent | on HN ]