• 0 Posts
  • 63 Comments
Joined 7 months ago
cake
Cake day: November 23rd, 2023

help-circle


  • When authenticating with git over SSH, the private key should be considered secret and well protected.

    That means the corresponding public key that was uploaded to the git server is enough to authenticate and no username is required. However, a password protected privare key is possible and extra layers of security can be added to the authentication mechanism.

    As far as resource based attacks based on public key searching, I doubt many servers have significant enough public keys on a single host to even notice. Most repos are siloed and have specific teams/individuals assigned to them, so only a small number of public keys even gets loaded.

    I dont know enough about the server side mechanics to be sure, but imo the attack surface is pretty small.
















  • Eh, plenty of servers in Europe are grown ass adults and they dont rely on tips. How do you think that works?

    Maybe once service starts declining more than it already has in the US, the customers will start complaining and the corporations will listen and try to pay servers a better wage so they are happier and more inclined to give happy service.

    Or maybe they’ll just keep raping profits from the “low-skilled” workers until the only ones who WANT to do the job CANT do the job because they arent skilled enough (hence, the decline of service quality in America as it stands today).