Of course once the attacker has access to all of your files he doesn't really need your private key (passphrase or not) to log into your machine. He can install his own keys, put a modified ssh/ssh-agent binary in the PATH, etc..
On Thursday, November 28, 2013 3:48:24 PM UTC, William wrote: > > > On Nov 28, 2013 4:36 AM, "Volker Braun" <[email protected] <javascript:>> > wrote: > > > > It would be just as easy for a compromised cloud ssh to download your > personal private key than to log your password. > > I always protect my ssh keys by passphrase protecting them, so just > downloading the private key does not trivially give access. Instead the > attacker would have to setup some sort of logger to get the passphrase, > which is harder. I also sometimes use ssh-agent. > > > The only solution is to make a different account on your own machine to > log into, assuming that your university allows remote logins to personal > machines at all (e.g. Oxford doesn't). > > > > > > On Thursday, November 28, 2013 12:01:05 PM UTC, Jason Grout wrote: > >> > >> On 11/27/13 9:31 AM, Georgi Guninski wrote: > >> > A minor disadvantage of this solution is cloud.sagemath > >> > sees the password/ssh key [email protected], so I wouldn't > >> > use this if I care about the account. > >> > >> Not if you use passwordless logins (i.e., copy your sagemath public key > >> to your personal server's authorized login file). > >> > > -- > > You received this message because you are subscribed to the Google > Groups "sage-support" group. > > To unsubscribe from this group and stop receiving emails from it, send > an email to [email protected] <javascript:>. > > To post to this group, send email to [email protected]<javascript:> > . > > Visit this group at http://groups.google.com/group/sage-support. > > For more options, visit https://groups.google.com/groups/opt_out. > -- You received this message because you are subscribed to the Google Groups "sage-support" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/sage-support. For more options, visit https://groups.google.com/groups/opt_out.
