Hacker GitHub

← All repos

FiloSottile/whoami.filippo.io

View on GitHub ↗ ★ 2,368 Go

A ssh server that knows who you are. $ ssh whoami.filippo.io

20 mentions on Hacker News by 18 people: 2 stories, 18 comments · first 2015-08-04 · latest 2026-01-04

Mentions per year 20 mentions · busiest year 2015 (7)
20082026
AllStoriesComments NewestTopOldest
  1. For a little more context and a PoC illustrating the matter: https://github.com/FiloSottile/whoami.filippo.io?ref=words.f...
    comment by dspillett · 2023-04-03 · in Show HN: Shhhbb, an SSH BBS
  2. …:( | | | | -- Filippo (https://filippo.io) | | | | | | P.S. The source of this server is at | | https://github.com/FiloSottile/whoami.filippo.io | | | +---------------------------------------------------------------------+ Of course, this…
    comment by j1elo · 2023-01-09 · in ssh whoami.filippo.io
  3. Public keys are identity, so, a remote server can (and a famous one does: https://github.com/FiloSottile/whoami.filippo.io ) tell you if e.g. you connect to it while offering to prove your identity with keys github knows about, because…
    comment by tialaramex · 2022-02-17 · in 1Password for SSH and Git (Beta)
  4. …whoami.filippo.io is not resolving. https://words.filippo.io/ssh-whoami-filippo-io/ and https://github.com/FiloSottile/whoami.filippo.io are useful. It suggests also adding the option IdentitiesOnly yes .
    comment by chrismorgan · 2022-01-24 · in Charm – Tools to make the command line glamorous
  5. https://github.com/FiloSottile/whoami.filippo.io#how-do-i-st...
    comment by vault · 2022-01-13 · in Apply for a job via SSH – $ ssh jobs.hackclub.com
  6. …that took advantage of this information. [1] https://news.ycombinator.com/item?id=10004678 [2] https://github.com/FiloSottile/whoami.filippo.io
    comment by GauntletWizard · 2021-11-13 · in Sign arbitrary data with your SSH keys
  7. …your public keys to any server it tries to authenticate to? You can see yours echoed below. Github: https://github.com/FiloSottile/whoami.filippo.io
    comment by dddddaviddddd · 2021-05-23 · in ssh whoami.filippo.io
  8. …also access (unless otherwise firewalled) all systems that ssh key grants them access to. See also: https://github.com/FiloSottile/whoami.filippo.io Using a private key per system or set of systems means that such an attacker would only…
    comment by mfontani · 2020-04-30 · in SSH hacks – a little sanity for remote workers
  9. …:) But not this time :( | | | | | | P.S. This whole thingy is Open Source! (And written in Go!) | | https://github.com/FiloSottile/whoami.filippo.io | | | | -- @FiloSottile (https://twitter.com/FiloSottile) | | |…
    comment by bloak · 2020-02-18 · in SSH Whoami.filippo.io
  10. …:) But not this time :( | | | | | | P.S. This whole thingy is Open Source! (And written in Go!) | | https://github.com/FiloSottile/whoami.filippo.io | | | | -- @FiloSottile (https://twitter.com/FiloSottile) | | |…
    comment by brudgers · 2020-02-17 · in ssh whoami.filippo.io
  11. …is to never present ALL your keys, but turn on "IdentitiesOnly yes" in your SSH config. Project: https://github.com/FiloSottile/whosthere
    comment by Foxboron · 2017-05-12 · in Ask HN: How do you manage SSH keys and SSL certificates in your company?
  12. …github only Host github.com PubkeyAuthentication yes IdentityFile ~/.ssh/id_rsa More instructions: https://github.com/FiloSottile/whosthere#how-do-i-stop-it
    comment by FiloSottile · 2015-08-04 · in Show HN: My SSH server knows who you are
  13. …Finally I mentioned a few reasons it might not work for you below [3]. [0] http://git.io/vOVYm [1] https://github.com/FiloSottile/whosthere [2] https://github.com/FiloSottile/whosthere/blob/master/src/ssh... [3]…
    comment by FiloSottile · 2015-08-04 · in Show HN: My SSH server knows who you are
  14. …then let you in, then check a huge GitHub keys database, then ask the GitHub API for your name. https://github.com/FiloSottile/whosthere#how-it-works
    comment by FiloSottile · 2015-08-04 · in Show HN: My SSH server knows who you are
  15. …| | | | | P.S. This whole thingy is Open Source! (And written in Go!) | | https://github.com/FiloSottile/whosthere | | | | -- @FiloSottile (https://twitter.com/FiloSottile) | | | +----------------------------------------------------
    comment by tschuy · 2015-08-04 · in Show HN: My SSH server knows who you are
  16. …| | | | | P.S. This whole thingy is Open Source! (And written in Go!) | | https://github.com/FiloSottile/whosthere | | | | -- @FiloSottile (https://twitter.com/FiloSottile) | | | +----------------------------------------------------
    comment by Zikes · 2015-08-04 · in Show HN: My SSH server knows who you are
  17. …:) But not this time :( | | | | | | P.S. This whole thingy is Open Source! (And written in Go!) | | https://github.com/FiloSottile/whosthere | | | | -- @FiloSottile (https://twitter.com/FiloSottile) | | |…
    comment by swah · 2015-08-04 · in Show HN: My SSH server knows who you are
  18. …:) But not this time :( | | | | | | P.S. This whole thingy is Open Source! (And written in Go!) | | https://github.com/FiloSottile/whosthere | | | | -- @FiloSottile (https://twitter.com/FiloSottile) | | |…
    comment by acomjean · 2015-08-04 · in Show HN: My SSH server knows who you are