News for hackers. Stuff that matters.
Re:Exe.dev/ by sureglymop on Saturday December 27, 2025 @05:00AM (#46400601)
Does anyone know e.g. a small systemd-nspawn oneliner to SSH in securely?
Re:Exe.dev/ by icedrift on Saturday December 27, 2025 @07:15AM (#46401308)
There's nothing dangerous about SSHing into an untrusted server unless you're using the same keys for everything.
Re:Exe.dev/ by otterley on Saturday December 27, 2025 @11:11AM (#46402777)
Remote resources only get your public key. It’s meant to be shared! Hence the word “public.”

The threat is having a private key stolen, in which case, having multiple keys can mitigate the amount of damage a threat actor can do. However, to steal your private key would involve a successful attack against your client, not against any server you might have given the public key to.

Re:Exe.dev/ by enneff on Saturday December 27, 2025 @02:27PM (#46404403)
There is also the threat of the server sending a data sequence that exploits a vulnerability in your terminal. It has happened before, but it’s rare.
Re:Exe.dev/ by otterley on Sunday December 28, 2025 @02:47AM (#46409258)
Always encrypt your SSH private key! It shouldn’t be so easily stolen.