News for hackers. Stuff that matters.

A comment on Stealing unencrypted SSH-agent keys from memory. Parent comment

Re:Stealing unencrypted SSH-agent keys from memory by cortesoft on Monday July 21, 2014 @05:54PM (#8066229)
I think the point is that they enter the passphrase once to load the keys into ssh-agent, and then the unattended process can use them forever.
[ Parent | on HN ]
Re:Stealing unencrypted SSH-agent keys from memory by agwa on Monday July 21, 2014 @05:58PM (#8066250)
If that's the case, then I would start a dedicated ssh-agent process just for the run, add the identities (without expiration), and later kill the agent when the unattended run is over.
[ Parent | on HN ]
Re:Stealing unencrypted SSH-agent keys from memory by __david__ on Monday July 21, 2014 @06:57PM (#8066509)
That's fine for that kind of scenario, but often "unattended run" means something spawned by cron, like a daily backup, or a CI system that spawns build jobs on slave machines. There's not a lot of options there.
[ Parent | on HN ]
Re:Stealing unencrypted SSH-agent keys from memory by e40 on Monday July 21, 2014 @06:02PM (#8066279)
This is the case.
[ Parent | on HN ]