$ ssh sshchat.hackclub.com

rkwasny · 5 years ago

Do not run it if you use ssh-agent!

Remember agent will forward all of your ssh keys to the untrusted server.

ktpsns · 5 years ago

You mean like https://github.com/mag-.keys ? SSH public keys should not be secrets.

rkwasny · 5 years ago

If you ssh into a host and use ssh-agent + `ForwardAgent Yes` - host can get your PRIVATE key.

quackduck · 5 years ago

Code is open source! I don't look at your public keys or private keys. I hash IPs so we have IDs that can't be tracked back to the IP.

phekunde · 5 years ago

Instead of (just) downvoting him, why not correct him? Look at his age!

ArloL · 5 years ago

Does this not require ForwardAgent to be enabled?

002445 · 5 years ago

Yes it should only be a problem if

  ssh -A sshchat.hackclub.com

is used to connect.

quackduck · 5 years ago

Tell me more about how that works.

quackduck · 5 years ago

Thanks Zach! I'm Ishan, the guy who made this thing lol https://github.com/quackduck

sampoder · 5 years ago

really cool!

quackduck · 5 years ago

Thank you Sam!