News for hackers. Stuff that matters.
Re:Protecting SSH Keys with macOS Secure Enclave by Gigachad on Wednesday November 11, 2026 @01:41AM (#50450366)
Secure Enclave is still more secure in that it should be impossible to access the private key. Password protected keys are still vulnerable to malware that can read the keyboard, trick you in to typing the password, or that have exploits in macOS to read the memory.
Re:Protecting SSH Keys with macOS Secure Enclave by AlexandrB on Wednesday November 11, 2026 @09:05AM (#50453581)
If you have malware that can read the keyboard, can't it just inject code via the keyboard to add their own authorized key to whatever server you're connecting to?
Re:Protecting SSH Keys with macOS Secure Enclave by palata on Wednesday November 11, 2026 @10:18AM (#50454465)
It is a different attack, though, that is not stealing your key.