Hacker News Reader

Reminder that ssh'ing to some random server is not without some privacy concern.

True, I can see your public key, username, and IP I guess. I only log the username and hash of the public key/password that I use for storing save files (the logs are for debugging, but I swear I don't sell them to google). You can see what I do in the source, of course you have to trust me on that :)

Yes, sorry should've said I never doubted you!

My comment more addressed to the clients, who can mitigate the issue with appropriate ssh_config.

More specifically, make sure that you aren't forwarding your ssh keys; otherwise the game can impersonate you on any server the keys work on.

Ah, that's worse than a mere privacy issue! Good point.

I was thinking merely about anonymity.

Both can be largely eliminated by having per host or per organization Identities and using IdentitiesOnly.

Reply on news.ycombinator.com