News for hackers. Stuff that matters.

A comment on A Whole New Code Search. Parent comment

Re:A Whole New Code Search by barkingcat on Wednesday January 23, 2013 @06:00PM (#5105873)
Why would people put dotfiles like ssh keys up on public github?

This kind of thing is best suited for a private repo (github is still ok, just make it private) - cause it's most likely of no use to anyone but that single user.

[ Parent | on HN ]
Re:A Whole New Code Search by jcoder on Wednesday January 23, 2013 @06:07PM (#5105904)
I would not suggest that it's okay even for a private repo. Never let your private keys leave your machine or its dedicated, encrypted backup.
[ Parent | on HN ]
Re:A Whole New Code Search by conradev on Wednesday January 23, 2013 @07:29PM (#5106306)
Although I would never do this myself, if the keys themselves are encrypted with a password and then uploaded, it's not nearly as bad.
[ Parent | on HN ]
Re:A Whole New Code Search by qznc on Thursday January 24, 2013 @04:15AM (#5108540)
In the case of ssh keys, you usually should use a different key per device/home directory and let your server accept all the keys.
[ Parent | on HN ]