Re:Show HN: Rebels in the sky – Terminal game about space pi...
by emmelaich on Friday November 22, 2024 @08:20PM
(#42218629)
Reminder that ssh'ing to some random server is not without some privacy concern.
[ Parent
| on HN ]
Re:Show HN: Rebels in the sky – Terminal game about space pi...
by discoinverno on Saturday November 23, 2024 @05:21AM
(#42220210)
True, I can see your public key, username, and IP I guess. I only log the username and hash of the public key/password that I use for storing save files (the logs are for debugging, but I swear I don't sell them to google). You can see what I do in the source, of course you have to trust me on that :)
Re:Show HN: Rebels in the sky – Terminal game about space pi...
by emmelaich on Saturday November 23, 2024 @07:01AM
(#42220480)
Yes, sorry should've said I never doubted you!
My comment more addressed to the clients, who can mitigate the issue with appropriate ssh_config.
Re:Show HN: Rebels in the sky – Terminal game about space pi...
by withinboredom on Saturday November 23, 2024 @11:58AM
(#42221875)
More specifically, make sure that you aren't forwarding your ssh keys; otherwise the game can impersonate you on any server the keys work on.
Re:Show HN: Rebels in the sky – Terminal game about space pi...
by emmelaich on Saturday November 23, 2024 @08:17PM
(#42225241)
Ah, that's worse than a mere privacy issue! Good point.
I was thinking merely about anonymity.
Both can be largely eliminated by having per host or per organization Identities and using IdentitiesOnly.