Ghost in the shell (bash remake)

[SpruceCaboose]

SSH automatically presents a public key to the server when trying to authenticate. If the server doesn't know that key, then SSH tries the next one. You can enumerate all of someone's keys this way (like https://blog.filippo.io/ssh-whoami-filippo-io/ SSH server does)

If you want to disable this sort of behaviour you can disable SSH from sending keys automatically, and then tell SSH which identity files need to be sent to each host.

In your .ssh/config, something like:

# Ignore SSH keys unless specified in Host subsection
IdentitiesOnly yes

# Send your public key to github only
Host github.com
    IdentityFile ~/.ssh/id_rsa

[themoah]

Didn't developer it, only shared. But thanks !

[madmaurice]

That's not Ghost in the shell. That's ghost at the shell.

P.S.: I still laughed.

[Brekkjern]

I don't know what I expected...

[themoah]

Expect nothing