Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!


Click here to return to the 'How to use ssh keys on a USB drive' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
How to use ssh keys on a USB drive
Authored by: rhowell on Feb 23, '05 04:56:46PM

Once a disk image (encrypted or not) and/or a USB drive is mounted, any user on the system can browse it depending on the permissions of the files and folders. Now, if you have private keys with 777-permissions (thanks windows!) aren't you at a huge risk of giving them away?



[ Reply to This | # ]
How to use ssh keys on a USB drive
Authored by: Shawn Parr on Feb 23, '05 11:48:35PM

YES! Just like any hard drive you put data on (without using FileVault) can be ripped out, and stuck in a firewire enclosure, and all your data can be read by anyone.

I understand this risk, and make sure that I always have the card in my posession, and that the key agent is disabled before logging off the machine (just to be extra paranoid).

There is no such thing as perfect security, only better and worse security.

This gives me better security for my servers (disabling login/password ssh), and gives me a bit of convenience. However it also gives me the inconvenience of having to be paranoid about where the USB drive is at all times.



[ Reply to This | # ]