News for hackers. Stuff that matters.

A comment on Heroku Fucking Console. Parent comment

Re:Heroku Fucking Console by bcoates on Friday March 01, 2013 @01:06PM (#5305858)
If the file really was already in the badguys group and 0440 it's already been compromised so that's just covering it up. I suppose if SSH really had the courage of its convictions it'd automatically upload the key fingerprint to some revoked key blacklist.
[ Parent | on HN ]
Re:Heroku Fucking Console by acdha on Friday March 01, 2013 @02:34PM (#5306431)
You have the ordering backwards: SSH complains now so the problem is fixed before someone gets limited access to the computer.

If your account or computer has already been compromised you're still screwed but this helps considerably on shared computers, NFS, etc. where the access situation is easier to misunderstand.

[ Parent | on HN ]
Re:Heroku Fucking Console by car54whereareu on Friday March 01, 2013 @01:12PM (#5305893)
blacklist the way sudo does http://xkcd.com/838/
[ Parent | on HN ]
Re:Heroku Fucking Console by vacri on Friday March 01, 2013 @05:22PM (#5307325)
on a fresh debian install, the first user (me) wasn't in the sudoers list. I sudo'd, and got reported. The report mail went to root, which was cloned to the first user...
[ Parent | on HN ]