[{"data":1,"prerenderedAt":933},["ShallowReactive",2],{"project-10004678":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":29,"sentiment":30,"stance_mix":31,"scored_comments":35,"aspects":36,"strip":46,"post_text":50,"what":51,"said":93,"maker_in_thread":198,"shape":205,"grid":210,"attempts":895,"same_week":896,"maker_shows":208,"maker_hidden":925,"reader_version":926,"card":927},"10004678","whoami.filippo.io","My SSH server knows who you are","title","Show HN: My SSH server knows who you are","https:\u002F\u002Fblog.filippo.io\u002Fssh-whoami-filippo-io\u002F","blog.filippo.io","FiloSottile",1438707793,2015,836,245,4,2565,1,"legend","security_privacy","ssh identity demo","other",[24,25,26,27,28],"ssh","public keys","github keys","privacy","ssh-agent forwarding","mixed",-0.128,{"positive":32,"neutral":33,"mixed":18,"critical":34},20,48,33,102,{"privacy":37,"idea":40,"execution":42,"docs":45},{"positive":38,"critical":39},6,12,{"positive":41,"critical":16},11,{"positive":43,"critical":44},0,17,{"positive":43,"critical":43},[16,43,43,43,43,47,47,47,18,18,47,48,48,49,18,49,18,43,49,16,43,49,43,47,16,49,49,47,47,49,18,18,16,18,48,48,48,18,48,48],5,2,3,null,{"problem":52,"audience":63,"pricing":50,"motivation":72,"time_to_build":50,"stack":77,"openness":90,"stage":91,"team_size":92},{"value":53,"source":54,"evidence":55},"SSH clients offer all public keys to any server, letting it link your identity","maker",[56,59],{"id":57,"by":11,"text":58},"10005239","Exactly! Once I get the keys I just check them against a scraped database of GitHub keys and ask the API for your name. (And if you have agent forwarding active I show you a big…",{"id":60,"by":61,"text":62},"10005076","chrisfosterelli","FYI, this happens because SSH automatically presents a public key to the server when trying to authenticate. If the server doesn't know that key, then SSH tries the next one. You…",{"value":64,"source":65,"evidence":66},"SSH users concerned about identity tracking","inferred",[67,68],{"id":60,"by":61,"text":62},{"id":69,"by":70,"text":71},"10005068","pdq","Found me; very nice. I wouldn't have guessed how you did it without the explanation about GitHub. I wonder if this means we should be rotating keys periodically? I know most…",{"value":73,"source":65,"evidence":74},"demonstrate that SSH leaks public keys that can identify users",[75,76],{"id":57,"by":11,"text":58},{"id":60,"by":61,"text":62},[78],{"value":79,"source":80,"evidence":81},"Go","commenter",[82,86],{"id":83,"by":84,"text":85},"10005720","skarap","Nice trick! Also - everybody should probably be aware that SSH zero-day isn't the only bad thing which can happen to you if you connect to a malicious SSH server. Your terminal…",{"id":87,"by":88,"text":89},"10005430","hamandcheese","Go has a great SSH library from what I can tell. I'm currently working on a project that is based around SSH, and Go seemed to be the only real option.","open_source","launched","unknown",{"praise":94,"objections":118,"requests":153,"questions":177,"alternatives":189},[95,110],{"value":96,"source":80,"evidence":97},"Clever, elegant demonstration of an overlooked SSH privacy issue",[98,102,106],{"id":99,"by":100,"text":101},"10008162","INTPenis","I see most people acting like this was obvious but I gotta believe that a clear majority of ssh users had no idea about this. Yet it's extremely obvious when you think about it.…",{"id":103,"by":104,"text":105},"10005719","georgerobinson","This is clever, and very sneaky! Let's say I downloaded every public key from GitHub to ~\u002F.ssh. Would this identify me as everyone on GitHub, or just the owner of the first…",{"id":107,"by":108,"text":109},"10006548","ultramancool","I brought this attack up on reddit 3 years ago. http:\u002F\u002Fwww.reddit.com\u002Fr\u002Fcrypto\u002Fcomments\u002Fxf6pa\u002Fopenssh_offers_your_public_keys_to_all_servers\u002F Glad to see someone implemented an…",{"value":111,"source":80,"evidence":112},"Useful awareness of key-sharing privacy",[113,117],{"id":114,"by":115,"text":116},"10005279","jvehent","It's a cool awareness experiment. Ultimately, public keys are public and people shouldn't be afraid of sharing them. Agent forwarding sharing is a big one though. Getting people…",{"id":69,"by":70,"text":71},[119,134],{"value":120,"source":80,"evidence":121},"Public keys are meant to be public, so no real harm",[122,126,130],{"id":123,"by":124,"text":125},"10006900","ernsheong","\"Public keys\" are supposed to be public anyway, isn't that what it's designed for? I see no harm",{"id":127,"by":128,"text":129},"10011155","Wisqnet","Cripes, people. WHO CARES? So I SSHed in. I got the message. Then I saw all the people freaking out here and couldn't believe my eyes. Ask yourself this: How often do you SSH in…",{"id":131,"by":132,"text":133},"10006443","drinchev","I don't see what's wrong with that.",{"value":135,"source":80,"evidence":136},"Did not work for many users due to key setup",[137,141,145,149],{"id":138,"by":139,"text":140},"10004969","acomjean","Didn't work for me. Here's what I got. I cleaned out .ssh\u002Fknownhosts after connecting. ``` +---------------------------------------------------------------------+ | | | _o\u002F…",{"id":142,"by":143,"text":144},"10005098","_wmd","Didn't work for me, not because I don't have a Github key, but because I use separate keys for everything, and don't have a default key (requires plenty of ~\u002F.ssh\u002Fconfig…",{"id":146,"by":147,"text":148},"10005145","sp4ke","It didn't work for me even though I have a github account and ssh key installed from the same machine. Maybe related to the fact I use several keys and keychain to manage keys.",{"id":150,"by":151,"text":152},"10004965","swah","I use putty, this failed.",[154,169],{"value":155,"source":80,"evidence":156},"Clearer output or explanation when connection closes",[157,161,165],{"id":158,"by":159,"text":160},"10005533","sarciszewski","It just closes my connection. ``` root@paragonie:~# ssh whoami.filippo.io Connection to whoami.filippo.io closed. ``` I'm not sure what I'm supposed to be seeing.",{"id":162,"by":163,"text":164},"10005795","vinceguidry","I simply got a \"Connection to whoami.filippo.io closed.\"",{"id":166,"by":167,"text":168},"10004953","jonbwhite","The connection gets closed immediately for me, what is it supposed to do?",{"value":170,"source":80,"evidence":171},"Way to disable GitHub publishing public keys",[172,173],{"id":69,"by":70,"text":71},{"id":174,"by":175,"text":176},"10008200","senthilnayagam","like google analytics cookies track your every activity on every website, sending public keys feel the same way. now I have to re-evaluate my ssh usage after discovering ssh…",[178],{"value":179,"source":80,"evidence":180},"How to avoid public key exposure via separate keys per host",[181,182,185],{"id":60,"by":61,"text":62},{"id":183,"by":11,"text":184},"10006516","Double-reading the man page I noticed that IdentitiesOnly makes ssh only send IdentityFile keys, however IdentityFile has a default of \"~\u002F.ssh\u002Fid_dsa, ~\u002F.ssh\u002Fid_ecdsa,…",{"id":186,"by":187,"text":188},"10008287","emmelaich","Didn't work for me because I use a separate key for each \"class\" of machines, where class is github, bitbucket, work, home, ... You can reduce the maintenance load by using the…",[190],{"value":191,"source":80,"evidence":192},"Per-host SSH key config using IdentitiesOnly",[193,194],{"id":60,"by":61,"text":62},{"id":195,"by":196,"text":197},"10006885","petrsnd","There may be some people concerned with GitHub publishing their identity to everyone, but it is pretty easy to use a separate key for GitHub (they'll even generate it for you) if…",{"comments":47,"answered":43,"key":199},[200,201,204],{"id":57,"text":58},{"id":202,"text":203},"10009191","Thanks for the link, adding a warning for that, too.",{"id":183,"text":184},{"commenters":206,"max_depth":207,"maker_replies":47,"first_comment_mins":208,"lifespan_hours":209},169,13,7,128,[211,213,215,218,222,224,228,231,235,237,240,243,246,249,251,253,256,259,262,265,267,269,271,274,277,280,283,285,287,289,292,295,299,302,305,307,311,314,317,320,324,327,330,334,337,339,342,345,347,348,350,354,357,360,363,366,370,372,374,375,378,380,382,385,388,392,395,398,400,403,407,410,413,416,419,422,423,426,428,431,434,436,437,438,441,444,446,449,451,454,456,459,461,464,467,469,471,475,478,481,483,485,489,493,496,498,500,503,505,508,510,512,514,516,519,522,524,525,528,531,534,537,540,542,545,547,551,553,556,559,561,564,569,572,574,577,579,582,584,587,590,593,596,598,601,606,608,611,615,619,621,623,626,628,631,634,637,639,641,644,648,652,655,659,661,663,665,667,670,673,677,679,683,685,687,690,693,696,698,701,705,708,710,714,716,719,721,724,726,729,732,735,739,742,746,750,753,755,757,759,762,764,768,770,773,775,778,780,784,788,792,796,798,800,803,806,808,810,814,818,821,823,825,827,831,835,837,841,844,846,850,854,856,859,863,867,871,873,875,878,881,884,886,889,891],[60,43,49,212,61,43],"project\u002Fneutral\u002Fprivacy",[57,43,43,214,11,18],"maker\u002Fneutral\u002Fnone",[216,43,49,214,217,43],"10005272","songgao",[219,43,49,220,221,43],"10005304","project\u002Fneutral\u002Fnone","rmetzler",[114,43,47,223,115,43],"project\u002Fpositive\u002Fidea",[225,43,43,226,227,43],"10005613","commenter\u002Fneutral\u002Fnone","marcosdumay",[229,43,43,226,230,43],"10009897","kpcyrd",[232,43,43,233,234,43],"10005379","other\u002Fneutral\u002Fnone","JoshTriplett",[236,43,43,233,84,43],"10005757",[238,43,43,233,239,43],"10008184","riffraff",[241,43,43,233,242,43],"10005991","phamilton",[244,43,43,233,245,43],"10006339","javajosh",[247,43,43,226,248,43],"10006425","saurik",[250,43,43,233,234,43],"10006547",[252,43,43,233,245,43],"10008232",[254,43,43,233,255,43],"10008266","throwaway2048",[257,43,43,233,258,43],"10008414","laumars",[260,43,43,233,261,43],"10008511","creshal",[263,43,43,226,264,43],"10009064","mentat",[266,43,43,226,261,43],"10009467",[268,43,43,226,264,43],"10011240",[270,43,43,226,261,43],"10014951",[272,43,43,226,273,43],"10008822","beagle3",[275,43,43,226,276,43],"10008643","hamburglar",[278,43,43,233,279,43],"10008787","micaeked",[281,43,43,233,282,43],"10006715","scintill76",[284,43,43,233,234,43],"10006891",[286,43,43,233,282,43],"10007365",[288,43,43,233,234,43],"10007554",[290,43,43,233,291,43],"10007929","Sevrene",[293,43,43,233,294,43],"10008541","jsmeaton",[296,43,47,297,298,43],"10007880","project\u002Fpositive\u002Fprivacy","brandonbloom",[300,43,43,226,301,43],"10008252","umangd",[303,43,43,233,304,43],"10008397","leni536",[202,43,43,306,11,18],"maker\u002Fneutral\u002Fdocs",[308,43,47,309,310,43],"10008608","maker\u002Fpositive\u002Fnone","rhino42",[312,43,43,233,313,43],"10005354","ars",[315,43,43,233,316,43],"10005934","azernik",[318,43,43,233,319,43],"10008336","jlgaddis",[321,43,49,322,323,43],"10005438","project\u002Fneutral\u002Fexecution","c22",[325,43,47,223,326,43],"10005468","RexRollman",[328,43,47,223,329,43],"10005619","jpmattia",[331,43,47,332,333,43],"10005665","project\u002Fpositive\u002Fnone","mirimir",[335,43,43,233,336,43],"10005778","leepowers",[338,43,43,233,282,43],"10006047",[340,43,47,309,341,43],"10006141","616c",[343,43,47,297,344,43],"10006357","rogeryu",[346,43,49,212,61,43],"10006481",[183,43,43,220,11,18],[349,43,43,226,61,43],"10006528",[351,43,18,352,353,43],"10006717","project\u002Fcritical\u002Fexecution","toyg",[355,43,49,220,356,43],"10006916","blfr",[358,43,43,233,359,43],"10006584","ipozgaj",[361,43,43,233,362,43],"10007053","nestorp",[364,43,43,233,365,43],"10008154","gioele",[367,43,18,368,369,43],"10008674","project\u002Fcritical\u002Fidea","dlitz",[371,43,43,233,282,43],"10009164",[373,43,43,233,61,43],"10011582",[138,18,18,352,139,43],[376,18,18,352,377,43],"10005103","joeblau",[379,18,43,226,239,43],"10005141",[381,18,43,226,377,43],"10005181",[383,18,43,226,384,43],"10032142","simoncion",[386,18,47,223,387,43],"10005404","igravious",[389,18,49,390,391,43],"10005133","project\u002Fneutral\u002Fidea","bmelton",[393,18,43,226,394,43],"10006868","taejo",[396,18,43,397,11,18],"10005169","maker\u002Fneutral\u002Fexecution",[399,18,49,322,221,43],"10005318",[401,18,49,322,402,43],"10006637","lelandbatey",[404,18,18,405,406,43],"10006785","project\u002Fcritical\u002Fprivacy","noobermin",[408,18,49,322,409,43],"10007151","microcolonel",[411,18,49,322,412,43],"10007687","hobarrera",[414,18,18,352,415,43],"10008698","bonzini",[417,18,49,322,418,43],"10007606","rietta",[420,18,49,322,421,43],"10008189","reidrac",[142,48,18,405,143,43],[424,48,49,212,425,43],"10005223","toxicFork",[427,48,18,405,108,43],"10005639",[429,49,43,233,430,43],"10004935","scosman",[432,49,43,233,433,43],"10005104","kazinator",[435,49,43,233,11,18],"10005188",[83,16,43,233,84,43],[107,47,47,297,108,43],[439,47,43,226,440,43],"10007353","baby",[442,47,18,405,443,43],"10007609","eru",[445,47,18,405,108,43],"10007694",[447,47,18,405,448,43],"10008168","versteegen",[450,47,43,226,440,43],"10015443",[452,38,49,390,453,43],"10005623","derefr",[455,38,18,368,443,43],"10007612",[457,208,43,233,458,43],"10008012","rachelbythebay",[460,208,18,405,100,43],"10008178",[462,208,49,212,463,43],"10008325","nindalf",[465,208,49,212,466,43],"10008347","misterjinx",[468,208,47,223,443,43],"10014279",[99,470,47,223,100,43],8,[472,473,49,390,474,43],"10004860",9,"simme_",[476,473,49,220,477,43],"10004975","shanemhansen",[479,473,43,233,480,43],"10005538","kaybe",[482,473,43,233,474,43],"10006539",[484,473,43,233,480,43],"10006657",[486,487,49,220,488,43],"10004945",10,"tacone",[490,487,43,491,492,43],"10005206","commenter\u002Fneutral\u002Fprivacy","mhurron",[494,487,18,405,495,43],"10005358","gmalette",[497,487,43,226,227,43],"10005671",[499,487,43,226,443,43],"10007618",[501,487,43,226,502,43],"10006193","barkingcat",[504,487,43,491,495,43],"10007980",[506,487,43,226,507,43],"10007440","eridius",[509,487,43,226,495,43],"10008045",[511,487,43,226,507,43],"10008369",[513,487,43,226,495,43],"10008971",[515,487,43,226,507,43],"10012807",[517,487,49,390,518,43],"10008734","voyou",[520,487,43,491,521,43],"10005858","im3w1l",[523,487,43,233,333,43],"10006149",[195,41,49,212,196,43],[526,39,47,223,527,43],"10005043","duggan",[529,39,49,212,530,43],"10005157","roozbeh18",[532,207,49,212,533,43],"10004947","yesco",[535,207,43,226,536,43],"10004956","kevinastone",[538,207,43,491,539,43],"10005173","nly",[541,207,43,226,61,43],"10005194",[543,207,43,491,544,43],"10005680","the8472",[546,207,43,226,61,43],"10006230",[548,207,43,549,550,43],"10006226","commenter\u002Fneutral\u002Fidea","RaleyField",[552,207,43,226,443,43],"10007637",[554,207,43,226,555,43],"10004959","publysher",[557,207,43,226,558,43],"10004977","karlshea",[560,207,43,226,533,43],"10005020",[562,207,43,226,563,43],"10005108","shmerl",[565,566,49,567,568,43],"10005234",14,"project\u002Fmixed\u002Fprivacy","arturhoo",[570,566,43,226,571,43],"10005293","chmike",[573,566,43,491,221,43],"10005346",[575,566,43,226,576,43],"10005448","lcswi",[578,566,43,491,221,43],"10005576",[580,566,43,491,581,43],"10005728","ewindisch",[583,566,43,226,571,43],"10008590",[585,566,43,586,568,43],"10005456","other\u002Fneutral\u002Fprivacy",[588,566,43,586,589,43],"10005373","brandonwamboldt",[591,566,43,586,592,43],"10005515","clinta",[594,566,43,233,595,43],"10006898","jrockway",[597,566,43,233,443,43],"10007625",[599,600,43,586,282,43],"10006036",15,[602,603,43,604,605,43],"10005187",16,"other\u002Fneutral\u002Fidea","aw3c2",[607,603,43,233,333,43],"10005711",[609,44,47,297,610,43],"10008113","username",[612,613,49,322,614,43],"10005017",18,"pmatev",[616,617,47,223,618,43],"10005604",19,"parshimers",[620,617,43,226,273,43],"10008061",[158,32,49,622,159,43],"project\u002Fneutral\u002Fdocs",[624,32,43,226,625,43],"10005570","bmohlenhoff",[627,32,43,226,159,43],"10005697",[629,32,43,226,630,43],"10005805","woof",[632,32,43,226,633,43],"10006395","uniformlyrandom",[635,32,43,226,636,43],"10006677","lottin",[638,32,43,226,633,43],"10006989",[640,32,43,226,159,43],"10007766",[642,32,49,622,643,43],"10005815","bonif",[645,646,49,322,647,43],"10007075",21,"robryk",[649,650,49,212,651,43],"10005393",22,"dadrian",[653,650,43,491,654,43],"10008563","gurkendoktor",[656,657,43,586,658,43],"10005702",23,"rdl",[660,657,43,233,443,43],"10007631",[662,657,43,233,658,43],"10007978",[664,657,43,226,443,43],"10008139",[666,657,43,233,658,43],"10008241",[668,657,43,233,669,43],"10008248","ersii",[671,657,43,672,443,43],"10014261","other\u002Fpositive\u002Fnone",[674,675,47,223,676,43],"10004971",24,"fortytw2",[678,675,43,226,555,43],"10005196",[680,681,49,390,682,43],"10004739",25,"Raed667",[127,684,43,491,128,43],26,[69,686,47,297,70,43],27,[688,686,43,586,689,43],"10005102","delinka",[691,686,43,491,692,43],"10005117","latortuga",[694,686,43,491,695,43],"10005212","justizin",[697,686,43,226,495,43],"10005372",[699,686,43,491,700,43],"10005543","bartbes",[702,703,49,212,704,43],"10005042",28,"ambrop7",[706,703,43,226,707,43],"10005087","icebraining",[709,703,43,226,394,43],"10007460",[711,712,43,233,713,43],"10008323",29,"sengork",[186,715,49,220,187,43],30,[717,718,18,368,502,43],"10006174",31,[720,718,43,226,394,43],"10007466",[722,723,18,405,633,43],"10006386",32,[725,723,43,226,443,43],"10007656",[727,34,43,604,728,43],"10005310","omarforgotpwd",[730,34,43,226,731,43],"10005353","golergka",[733,34,43,226,734,43],"10005551","cortesoft",[736,737,18,352,738,43],"10004961",34,"jonathonf",[740,737,18,352,741,43],"10006108","LeonidasXIV",[743,744,43,233,745,43],"10008443",35,"jakeogh",[747,748,43,233,749,43],"10004929",36,"cmadan",[751,748,43,226,752,43],"10005029","badmadrad",[754,748,43,226,605,43],"10005179",[756,748,43,226,695,43],"10005220",[103,758,47,223,104,43],37,[760,758,49,212,761,43],"10006304","ParadoxOryx",[763,758,49,212,104,43],"10008394",[765,766,43,233,767,43],"10008545",38,"131hn",[123,769,49,212,124,43],39,[771,769,43,491,772,43],"10006957","userbinator",[774,769,43,226,440,43],"10007369",[776,769,18,405,777,43],"10006991","gojomo",[174,779,18,405,175,43],40,[781,782,18,352,783,43],"10006294",41,"rhinoceraptor",[785,786,43,233,787,43],"10006840",42,"GauntletWizard",[789,790,18,368,791,43],"10008478",43,"fasteo",[793,794,49,212,795,43],"10008396",44,"anilshanbhag",[166,797,18,352,167,43],45,[799,797,49,220,151,43],"10004970",[801,797,49,220,802,43],"10005018","tschuy",[804,797,18,352,805,43],"10005488","mahouse",[807,797,43,233,630,43],"10005834",[809,797,43,226,805,43],"10006360",[811,812,49,322,813,43],"10006142",46,"therealmarv",[815,816,18,352,817,43],"10005422",47,"rtz12",[819,33,47,223,820,43],"10005006","samps",[822,33,49,212,689,43],"10005118",[824,33,43,226,443,43],"10007676",[146,826,18,352,147,43],49,[828,829,49,212,830,43],"10009956",50,"kragen",[832,833,49,220,834,43],"10006212",51,"enaasen",[87,836,43,233,88,43],52,[838,839,18,405,840,43],"10005883",53,"dmytrish",[842,839,43,226,843,43],"10006865","craigds",[845,839,43,226,440,43],"10007373",[847,848,18,352,849,43],"10007407",54,"cmdrfred",[851,852,43,233,853,43],"10008530",55,"RoryH",[162,855,18,352,163,43],56,[857,855,18,352,858,43],"10005949","argc",[860,861,49,212,862,43],"10010663",57,"ausjke",[864,865,18,352,866,43],"10005965",58,"ambicapter",[868,869,43,233,870,43],"10008278",59,"hitlin37",[131,872,47,297,132,43],60,[150,874,18,352,151,43],61,[876,874,49,322,877,43],"10004982","Zikes",[879,874,49,322,880,43],"10005075","morganvachon",[882,874,49,322,883,43],"10006160","NotHereNotThere",[885,874,18,352,880,43],"10006371",[887,874,49,322,888,43],"10008723","egeozcan",[890,874,43,226,880,43],"10017064",[892,893,49,212,894,43],"10005481",62,"gcb0",[],[897,902,907,911,916,920],{"id":898,"name":899,"points":900,"category":901},"10008637","ImagePlay",451,"creative",{"id":903,"name":904,"points":905,"category":906},"10005415","JAWS",375,"dev_tools",{"id":908,"name":909,"points":910,"category":901},"9990160","Iconic Patent Posters",241,{"id":912,"name":913,"points":914,"category":915},"10012499","Raise Your Flag",151,"productivity",{"id":917,"name":918,"points":919,"category":906},"9975022","Mycli",106,{"id":921,"name":922,"points":923,"category":924},"10007712","Magic Casts",99,"learning_science",false,"v2",{"id":928,"name":5,"line":6,"ai":925,"cat":20,"year":13,"points":14,"comments":15,"rec":29,"s":929,"top":18,"kw":930,"maker":11,"domain":10,"tier":19,"attempts":43,"strip":931,"url":9,"mix":932,"praise":96,"objection":120,"sub":21},10004678,-0.13,[24,25,26,27,28],"4000055511522313103403054335531141222122",[32,33,18,34],1793990928774]