News for hackers. Stuff that matters.

A comment on Secretive: Store SSH Keys in the Secure Enclave. Parent comment

Re:Secretive: Store SSH Keys in the Secure Enclave by nixpulvis on Friday March 10, 2023 @12:19PM (#35097568)
Um... it replaces a password (or manual management of keys) with a USB device I can carry around like a proper key.
[ Parent | on HN ]
Re:Secretive: Store SSH Keys in the Secure Enclave by goodpoint on Friday March 10, 2023 @04:53PM (#35101663)
You described what it does and missed the point of my question. What real security risk is it being handled?
[ Parent | on HN ]
Re:Secretive: Store SSH Keys in the Secure Enclave by Too on Saturday March 11, 2023 @01:28AM (#35106026)
A hacker who got into your laptop can’t simply copy your id_rsa file to get further access to all your servers, it’s physically stored in the usb dongle with no way to get it out and requires physically touching it each time key is used.
[ Parent | on HN ]
Re:Secretive: Store SSH Keys in the Secure Enclave by goodpoint on Monday March 13, 2023 @09:13AM (#35135243)
A hacker who got into your laptop can piggy back on your SSH connections (and also extract all sort of vital data).

Not being able to extract SSH keys helps very little.

[ Parent | on HN ]
Re:Secretive: Store SSH Keys in the Secure Enclave by smw on Thursday March 23, 2023 @06:52PM (#35282591)
Helps more than you might think! Because the other thing Secretive can do is require touch ID for each use of the key. Similarly, you can require a button push from your yubikey.
[ Parent | on HN ]