Contrary to often repeated "use only ssh key login, disable passwords" - I find the act of copying ssh keys all over my portable devices rather insecure action to take.
Also, I consider using a corporate owned pc as last resort backup for logging in. I really dislike the idea putting any of my personal stuff on there, especially login keys. Just a food for thought, -T On Thu, Jan 11, 2024, 18:08 MC_Sequoia <[email protected]> wrote: > "TL;DR, this is using password guessing. Solution: use better passwords or > urn off passwords altogether and use ssh authorized_keys." > > Indeed and this is probably obvious and easy for high level users, but not > everyone is and also there might be folks who've setup rsync and/or use scp > with simple passwords for ease of management or might have take over admin > of legacy systems that haven't been documented well and they might not be > aware of all connections and their configurations. > >
