Re: ssh

On Wed, Feb 28, 2007 at 05:29:11PM -0400, Guillermo Garron wrote:

I use this method, (without passphrase) to be able to run script (with
cronjob) from one machine into other, if I put a passphrase that is
not going to work, am I right?

This is not correct. With keychain, you can set it up to hold the ssh
keys in memory after you log out until the next time you log in. The
idea is that if an attacker cracks your account and then logs in, the
keys will be cleared. Of course, this will also happen when you log in
again and so you will need to enter your passphrase each time you log
in. But this is the same situation as when you use plain ssh-agent.

Anyway to get my key, a "hacker" will need access to my PC right? if
both PCs are secured there should be no chance to get my keys stolen.

I thikn that "no chance" is a bit strong. You never know what might
happen. Besides, that's why you want defense in depth.

Regards,

-Roberto

--
Roberto C. Sanchez
http://people.connexer.com/~roberto
http://www.connexer.com

Attachment: signature.asc
Description: Digital signature

Relevant Pages

  • Re: asking passphrase only on first use
    ... >required and not when ssh-add is started. ... you have to enter the passphrase for all of them ... >the associated keys or not during that session. ... These commands invoked from .bashrc will add an ssh-agent if appropriate ...
    (SSH)
  • Re: Passwordless ssh, "once and for all"...
    ... ssh in "ssh machine1@123.123.123.123" ... When creating keys for passwordless access, create keys with no passphrase ... Passwordless ssh, "once and for all"... ...
    (SSH)
  • Re: GC and security
    ... the passphrase is supposed to solve, ... which means we need some kind of EFS ... on the USB keys that can utilize the same encryption keys. ...
    (comp.lang.python)
  • Re: SSH
    ... On 05-Feb-2002, Eli Dart wrote: ... >> phrases? ... access to several private keys all known to be encrypted with the same ... passphrase might be able to accelerate there attempts to access the keys ...
    (FreeBSD-Security)
  • Re: SSH
    ... On 05-Feb-2002, Eli Dart wrote: ... >> phrases? ... access to several private keys all known to be encrypted with the same ... passphrase might be able to accelerate there attempts to access the keys ...
    (FreeBSD-Security)