|
|
|
This thread is locked; no one can reply to it.
|
1
2
|
| Online password managers? |
|
Arthur Kalliokoski
Second in Command
February 2005
 |
Elias said: access to my work computers harddrive Well there's your problem right there. They all watch too much MSNBC... they get ideas. |
|
SiegeLord
Member #7,827
October 2006
 |
Elias said: I am using a key, but anyone with access to my work computers harddrive as well as the NSA have it as well :p That could be a good thing More seriously, why not password protect that key? I recently switched to using password protected ssh keys for exactly that reason... it's a bit of a pain to use ssh-agent all the time, but I find that I feel a lot safer. "For in much wisdom is much grief: and he that increases knowledge increases sorrow."-Ecclesiastes 1:18 |
|
Chris Katko
Member #1,881
January 2002
 |
SiegeLord said: More seriously, why not password protect that key? I recently switched to using password protected ssh keys for exactly that reason... it's a bit of a pain to use ssh-agent all the time, but I find that I feel a lot safer. Yeah, but you lose the automation factor of not having to enter a password. But in general, if your computer is physically compromised, a password on the key file isn't going to help you. Even if your password file has a 16368-bit cipher, it won't help if it's already logged in! -----sig: |
|
OnlineCop
Member #7,919
October 2006
 |
My work bought me a new Macbook Pro, which I wiped and reinstalled the OS. I take it home with me every day, and I'm paranoid enough to always lock my screen whenever I walk away (it's nice to have a hotkey to lock the desktop). So I'm pretty confident that none of my co-workers have accessed my laptop and obtained my private key. My router only accepts SSH on a specific port (something like 16666 or some other) and it denies all SSH requests that don't already have a key pair set up. The router forwards that port to 22, through which I connect to my home computer. It's very possible that I've forgotten something and have already been hacked, but I never do anything illegal from that work computer anyway (I just want to use it to remain anonymous If you guys have suggestions on how to be more secure, I'm all ears. I figure you can always be paranoid, but can you be paranoid enough?
|
|
SiegeLord
Member #7,827
October 2006
|
Chris Katko said: Yeah, but you lose the automation factor of not having to enter a password. You enter it once per session (or, if you set a time out, only every couple or so minutes). Either way, there's more to using public key login than just convenience. Quote: Even if your password file has a 16368-bit cipher, it won't help if it's already logged in! ssh-agent has a timeout option, and so does Keepass (which is what I use for my password management). You could also always manually log out if you hear the partyvan pull up. "For in much wisdom is much grief: and he that increases knowledge increases sorrow."-Ecclesiastes 1:18 |
|
Chris Katko
Member #1,881
January 2002
|
OnlineCop said: My work bought me a new Macbook Pro, which I wiped and reinstalled the OS. I take it home with me every day, and I'm paranoid enough to always lock my screen whenever I walk away (it's nice to have a hotkey to lock the desktop). If you have a Mac, thanks to the absurd hyper-valuation of mac products (both new and as old as the Apple II!), you're biggest problem with your Mac is it being physically stolen and sold at a pawn shop/flea market/directly-to-college-kids. The computer itself is a thousand times more valuable and easy to access than anything you might have on your computer. -----sig: |
|
Elias
Member #358
May 2000
|
Chris Katko said: The computer itself is a thousand times more valuable and easy to access than anything you might have on your computer. On my work laptop it's the opposite. The computer itself is maybe 1000€, my boss' secret code on there is (at least according to him) worth millions. -- |
|
Chris Katko
Member #1,881
January 2002
|
Elias said: On my work laptop it's the opposite. The computer itself is maybe 1000€, my boss' secret code on there is (at least according to him) worth millions. That's what I'm getting at. Security is application dependant. My laptop is a lot harder to steal: -----sig: |
|
|
1
2
|
... "I didn't download all these movies and music, someone ssh'd into my computer and did it!"
).
