A good reminder that your public keys are, in fact, public. For most people, this is probably a good thing, unless you're specifically trying to hide your identity.
Show HN: My SSH server knows who you are
71–80 of 257 posts
Re: Show HN: My SSH server knows who you are
#72Earlier quoted context omitted.
Didn't work for me either. It seems like it fails more than it succeeds based on the results posted in this thread.
presumably, those for which it worked are less likely to post? FWIW, it worked for me.
and it worked for me too, just thought i'd chime in here. nice educational and simple project.
Re: Show HN: My SSH server knows who you are
#73 We tried to use that to find your GitHub username, but we
couldn't :( maybe you don't even have GitHub ssh keys, do you?Re: Show HN: My SSH server knows who you are
#74Go has a great SSH library from what I can tell. I'm currently working on a project that is based around SSH, and Go seemed to be the only real option.
Re: Show HN: My SSH server knows who you are
#75FYI, this happens because SSH automatically presents a public key to the server when trying to authenticate. If the server doesn't know that key, then SSH tries the next one. You can enumerate all of someone's keys this way (like this SSH server does) If you want to disable this sort of behaviour you can disable SSH from sending keys automatically, and then tell SSH which identity files need to be sent to each host.…
This only worked for me after I renamed id_rsa (and id_rsa.pub).
Re: Show HN: My SSH server knows who you are
#76Re: Show HN: My SSH server knows who you are
#77Re: Show HN: My SSH server knows who you are
#78Nice idea, but don't run the command if you have Host * ForwardAgent yes On your ~/.ssh/config
What is the effect of ForwardAgent ?
The host you're connecting to could be able to, force write/destroy your public repos or clone your (and your employer's) private repos given that he knows their paths, eg: github/github. I'd assume that a few companies have a */secrets repo of some sort.
Re: Show HN: My SSH server knows who you are
#79FYI, this happens because SSH automatically presents a public key to the server when trying to authenticate. If the server doesn't know that key, then SSH tries the next one. You can enumerate all of someone's keys this way (like this SSH server does) If you want to disable this sort of behaviour you can disable SSH from sending keys automatically, and then tell SSH which identity files need to be sent to each host.…
I never realized that SSH does this. Thank you.
Re: Show HN: My SSH server knows who you are
#80tl;dr:
1. ssh sends the pubkey you use on github ^1
2. his server compare with the publicly ^2 available pub key you uploaded to github.com
^1 (not mine, i set keys per domain)
^2 news to me!