Live data from Hacker News

Show HN: My SSH server knows who you are

blog.filippo.io

1–10 of 257 posts

Re: Show HN: My SSH server knows who you are

#7
> Did you know that ssh sends all your public keys to any server it tries to authenticate to? You can see yours echoed below.

> We tried to use that to find your GitHub username, but we couldn't :( maybe you don't even have GitHub ssh keys, do you?

> By the way, did you know that GitHub publishes all users' ssh public keys and Ben (benjojo.co.uk) grabbed them all?

> That's pretty handy at times :) But not this time :(

Better luck next time, I guess :)

Re: Show HN: My SSH server knows who you are

#10
post #8

Forgive me ignorance here but what steps should I take to avoid someone from getting my public key off github and then using it to screw with my repos? Was there a major step I missed here when I made these keys?

It's a public key for a reason. You need to the private key to authenticate, so you're safe having everyone know your public key.
Post reply on HN