Hacker Public Radio

HPR4327: Chatting with Sgoti

Listen Later

This show has been flagged as Explicit by the host.

Chatting wth Sgoti
Sgoti talks about SSH and Github.

  • openbsd: PreferredAuthentications \

    • Specifies the order in which the client should try authentication methods. \

    • gssapi-with-mic,hostbased,publickey,keyboard-interactive,password

      • openbsd: HostKeyAlgorithms \
        • $ssh -Q HostKeyAlgorithms;
        ssh-ed25519
        [email protected]
        [email protected]
        [email protected]
        ssh-rsa
        rsa-sha2-256
        rsa-sha2-512
        ssh-dss
        ecdsa-sha2-nistp256
        ecdsa-sha2-nistp384
        ecdsa-sha2-nistp521
        [email protected]
        [email protected]
        [email protected]
        [email protected]
        [email protected]
        [email protected]
        [email protected]
        [email protected]
        [email protected]
        [email protected]

        • openbsd: IdentitiesOnly \

          • Specifies that ssh(1) should only use the configured authentication identity and certificate files (either the default files, or those explicitly configured in the ssh_config files or passed on the ssh(1) command-line), even if ssh-agent(1) or a PKCS11Provider or SecurityKeyProvider offers more identities. The argument to this keyword must be yes or no (the default). This option is intended for situations where ssh-agent offers many different identities. \

            • Sample ssh config. \

            #Github Primary Yubikey
            Host github
            User git
            HostName github.com
            Port 22
            IdentityFile ~/.ssh/github-yubikey-0
            #Github Secondary Yubikey
            Host github
            User git
            HostName github.com
            Port 22
            IdentityFile ~/.ssh/github-yubikey-1
            #Global properties.
            Host *
            PubkeyAuthentication=yes
            PreferredAuthentications=publickey,keyboard-interactive
            [email protected],ssh-ed25519,rsa-sha2-512
            #ssh-ed25519
            #[email protected]
            #[email protected]
            #[email protected]
            #ssh-rsa
            ssh-keygen -t ed25519-sk -C "[email protected]" -f ~/.ssh/github-yubikey-0;
            ssh-keygen -t ed25519-sk -C "[email protected]" -f ~/.ssh/github-yubikey-1;
            chmod --change =400 ~/.ssh/github*; #Owner only!

            • lawrencesystems: SSH with YubiKey FIDO U2F Authentication. \

            • yubico: YubiKey 5 Series \

            • github: Generating a new SSH key and adding it to the ssh-agent. \

              • EOF

              Provide feedback on this episode.

              ...more
              View all episodesView all episodes
              Download on the App Store
              Hacker Public RadioBy Hacker Public Radio
              • 4.2
              • 4.2
              • 4.2
              • 4.2
              • 4.2

              4.2

              34 ratings

              More shows like Hacker Public Radio

              View all
              The Changelog: Software Development, Open Source by Changelog Media

              The Changelog: Software Development, Open Source

              292 Listeners

              Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

              Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

              374 Listeners

              LINUX Unplugged by Jupiter Broadcasting

              LINUX Unplugged

              266 Listeners

              SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

              SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

              653 Listeners

              Curious Cases by BBC Radio 4

              Curious Cases

              827 Listeners

              The Strong Towns Podcast by Strong Towns

              The Strong Towns Podcast

              426 Listeners

              Late Night Linux by The Late Night Linux Family

              Late Night Linux

              164 Listeners

              Darknet Diaries by Jack Rhysider

              Darknet Diaries

              8,012 Listeners

              Cybersecurity Today by Jim Love

              Cybersecurity Today

              177 Listeners

              CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

              CISO Series Podcast

              189 Listeners

              TechCrunch Daily Crunch by TechCrunch

              TechCrunch Daily Crunch

              41 Listeners

              Strict Scrutiny by Crooked Media

              Strict Scrutiny

              5,774 Listeners

              2.5 Admins by The Late Night Linux Family

              2.5 Admins

              97 Listeners

              Cyber Security Headlines by CISO Series

              Cyber Security Headlines

              136 Listeners

              What the Hack? by DeleteMe

              What the Hack?

              222 Listeners