News for hackers. Stuff that matters.

A comment on Chat over SSH.

Re:Chat over SSH by publicfig on Wednesday January 07, 2015 @11:36AM (#8851466)
This exposes your public key through /whois <username>. In order to protect that along with hiding your system's default username, join with "ssh -o PubkeyAuthentication=no <username>@chat.shazow.net"
[ Parent | on HN ]
Re:Chat over SSH by rakoo on Thursday January 08, 2015 @08:10AM (#8856188)
Better yet, choose your public key depending on the server you're connecting to:

https://wiki.archlinux.org/index.php/SSH_keys#Managing_multi...

[ Parent | on HN ]
Re:Chat over SSH by sloppiiiii on Wednesday January 07, 2015 @12:34PM (#8851846)
Why does that matter if it is a public key?
[ Parent | on HN ]
Re:Chat over SSH by falcolas on Wednesday January 07, 2015 @01:41PM (#8852339)
Theoretically, for DSA and RSA keys under 1024 bytes, they can be brute forced. If you have one of these keys, you won't want to expose them.

It's security through obscurity, but obscurity in addition to real security offers no real harm.

[ Parent | on HN ]