Top all-time · #7761
rabexc.org
Personal blog · rabexc.org/postssecuritysystemsprogramming
rabexc.org is a personal blog at rabexc.org about security, systems and programming. Since 2013, 10 different Hacker News readers have linked it 10 times, most often “The pitfalls of using ssh-agent, or how to use an agent safely”. The last post was in 2022, but the archive is still widely read.
Too few sampled comments (3) to say how often HN recommends it.?
Why HN links it
HN readers link this blog for its posts on ssh-agent pitfalls and on whether public Wi-Fi security advice still holds. Commenters cite it as a source for SSH security warnings.
Summarised by Claude from a sample of 3 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Experiences and life lessons of a computer guy in a world of hacks and technology. Some posts are boring, some are fun and exciting, some may be mildly interesting to you.
Most-linked posts?
- The pitfalls of using ssh-agent, or how to use an agent safely4 people · 4 mentions · first linked 2014-11-13
- Guessing pages visited via TLS using traffic dumps2 people · 2 mentions · first linked 2017-05-02
What Hacker News says?
I worded it the wrong way I guess. Edit: I don't really know how do say this short and concise, but you should only do this with servers you trust. * http://rabexc.org/posts/pitfalls-of-ssh-agents * http://heipei.github.io/2015/02/26/SSH-Agent-Forwarding-cons...
Comment linking /posts/pitfalls-of-ssh-agents
on “Show HN: My SSH server knows who you are”Submitted The pitfalls of using SSH-agent, or how to use an agent safely as a story · 180 points
HN discussionBe careful; there are plenty of ways ssh-agent can bite you too. Here are a few: http://rabexc.org/posts/pitfalls-of-ssh-agents
Comment linking /posts/pitfalls-of-ssh-agents
on “How to SSH Properly”Submitted The pitfalls of using ssh-agent, or how to use an agent safely as a story · 87 points
HN discussion> But these parties can’t see the pages you visit on those sites (e.g. wikipedia.org/controversial-topic) This is... not entirely wrong, but overly simplified. My impression is that TLS fingerprinting is sometimes-to-often good enough to figure out which exact page of a static website that a user is visiting[0]. That's not to say TLS is useless, or that the fingerprinting isn't hard enough that some adversaries won'…
Comment linking /posts/guessing-tls-pages
on “Advice to avoid public Wi-Fi is mostly out of date”Submitted The pitfalls of using ssh-agent, or how to use an agent safely as a story · 3 points
HN discussionSubmitted Recovering from a failed SSD on linux as a story · 3 points
HN discussionSubmitted Python IO Performance as a story · 3 points
HN discussionSubmitted Guessing pages visited via TLS using traffic dumps as a story · 1 points
HN discussionSubmitted Randomizing should be easy, right? as a story · 1 points
HN discussion