Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
swebs
on Dec 4, 2019
|
parent
|
context
|
favorite
| on:
Two malicious Python libraries caught stealing SSH...
Ok, but your private keys are stored in your home directory. No root access required.
otachack
on Dec 4, 2019
|
next
[–]
For sure, but does applying a password on pub-priv key creation encrypt it? Haven't tried it myself yet but may later when I'm back at my computer.
mikorym
on Dec 4, 2019
|
parent
|
next
[–]
Yes, if you use OpenSSL it will ask if you want to encrypt with a password. You can verify this by just opening the file in a text editor and you'll see that the contents are obfuscated via that password.
eikenberry
on Dec 5, 2019
|
prev
[–]
But they are encrypted and so are of no use to anyone.
Consider applying for YC's Fall 2026 batch!
Applications
are open till July 27.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search: