$ ssh sshchat.hackclub.com | Hacker News Reader

$ ssh sshchat.hackclub.com

24 pointszachlatta12 comments

Try running the above in your terminal. Code is at https://github.com/quackduck/devzat.

Built by 15 year old https://github.com/quackduck.

View on HN

Do not run it if you use ssh-agent!

Remember agent will forward all of your ssh keys to the untrusted server.

You mean like https://github.com/mag-.keys ? SSH public keys should not be secrets.

If you ssh into a host and use ssh-agent + `ForwardAgent Yes` - host can get your PRIVATE key.

They can't get your private key - But they can make use of it so long as you're connected. Definitely only enable `ForwardAgent` for hosts that you trust.

Code is open source! I don't look at your public keys or private keys. I hash IPs so we have IDs that can't be tracked back to the IP.

Instead of (just) downvoting him, why not correct him? Look at his age!

Does this not require ForwardAgent to be enabled?

Yes it should only be a problem if

  ssh -A sshchat.hackclub.com

is used to connect.

Tell me more about how that works.

Thanks Zach! I'm Ishan, the guy who made this thing lol https://github.com/quackduck

really cool!

Thank you Sam!

Reply on news.ycombinator.com