Live data from Hacker News

Free Github SSH keys anyone?

github.com

11–20 of 25 posts

Re: Free Github SSH keys anyone?

#11
post #7

How exactly does this happen? I can understand that some people don't understand the need to keep their private key offline, but I would have thought those people aren't really aware of the existence of the private key...so how does it end up in a github repo?

$ git add .ssh $ git commit

It's probably more like:

   $ git add .
   $ git commit

Re: Free Github SSH keys anyone?

#14
post #4

I almost can't believe someone would commit their .ssh directory to a public GitHub repo. Seriously - why? Your public key, sure, but the entire directory?

The authorized_keys and known_hosts are nice to be able to share across machines.

But of course you also want to be real careful about authenticating them (a signed tag in Git can serve that purpose).

Re: Free Github SSH keys anyone?

#15
post #7

How exactly does this happen? I can understand that some people don't understand the need to keep their private key offline, but I would have thought those people aren't really aware of the existence of the private key...so how does it end up in a github repo?

$ git add .ssh $ git commit

Yes but what is that key doing anywhere near the repository anyway?

Re: Free Github SSH keys anyone?

#16
post #7

How exactly does this happen? I can understand that some people don't understand the need to keep their private key offline, but I would have thought those people aren't really aware of the existence of the private key...so how does it end up in a github repo?

$ git add .ssh $ git commit

[deleted]

Re: Free Github SSH keys anyone?

#17
post #5

We need a cross reference between this and Facebook graph search. For science. (I flagged, also, because this should be told to the guys at Github, not out in the open.) Oh, and of course, Google indexes them. Fantastic.

I shot github an email when the feature was first released their stance is that what is out in public, is out in public.

Re: Free Github SSH keys anyone?

#18
post #4

I almost can't believe someone would commit their .ssh directory to a public GitHub repo. Seriously - why? Your public key, sure, but the entire directory?

In all likelihood, these are NOT the user's private SSH keys, but a key generated for the service that the user is developing - such as a key to run backups and issue remote commands. Thus I can well see that the key could be committed as part of an application stack.

Re: Free Github SSH keys anyone?

#19
post #4

I almost can't believe someone would commit their .ssh directory to a public GitHub repo. Seriously - why? Your public key, sure, but the entire directory?

I purpose a corollary to Hanlon's razor: Never attribute to stupidity that which is adequately explained by ignorance?

ignorance is almost always the explanation
Post reply on HN