News for hackers. Stuff that matters.
Re:Keystroke timing obfuscation added to SSH(1) by patrakov on Tuesday August 29, 2023 @05:29PM (#37314399)
> Maybe the SSH agent on the client can re-authenticate to the server when requested?

There is a PAM module that does this: https://github.com/jbeverly/pam_ssh_agent_auth

Note that this is a bad idea from the security standpoint, as it requires SSH agent forwarding. Which means that, if the remote server is compromised, the attacker can use your SSH agent to log into other servers as you.

Re:Keystroke timing obfuscation added to SSH(1) by rollcat on Tuesday August 29, 2023 @06:06PM (#37314765)
The local agent can ask the user to approve/deny signing requests.