Right, but this has nothing to do with the practice of protecting your private key. That the most sophisticated attacker with the most resources may be able to tunnel into your data is no excuse for lax security.
AWS does not have your private key, that's how public key infrastructure works. ;)
If you keep one key per device, you can revoke it if/when that device is compromised, stolen, etc.. That key is for initial access to provision your machine, after which you should have a more sophisticated means of…
IAM rotates ssh keys?
By all means, have a separate, passphrase-protected key for each separate device (desktop, laptop, tablet) and push them to your machines using something like chef and the 'users' and 'sudo' community cookbooks, at a…
livin' the dream, brah!
The port shutdown was about the truckers, though there was some ILWU support - I have personally met ILWU leaders who were in support. The truckers are not allowed to unionize, are employed as "independent contractors",…
and we should expect them to!
Yes, now go away.
Are you posting from the 90s?
The anger is that I'm ashamed to be associated with most people in the tech community lately, wherever I can live, and that so many people who just moved to the bay area think they know so much about how they are…
The content of most of these comments should be unacceptable in any community.
The problem is not that Google, Facebook, and others are "solving a problem" by providing these bus fleets. They are offering jobs on the peninsula paying more than jobs tend to pay in SF [because SF companies have to…
I do about 30h of "work days" and easily more than 10h of off-hours, took me a few changes of venue to remove the requirement to be at my desk 8-9 hours a day, and I am more productive and happier.
Right, but this has nothing to do with the practice of protecting your private key. That the most sophisticated attacker with the most resources may be able to tunnel into your data is no excuse for lax security.
AWS does not have your private key, that's how public key infrastructure works. ;)
If you keep one key per device, you can revoke it if/when that device is compromised, stolen, etc.. That key is for initial access to provision your machine, after which you should have a more sophisticated means of…
IAM rotates ssh keys?
By all means, have a separate, passphrase-protected key for each separate device (desktop, laptop, tablet) and push them to your machines using something like chef and the 'users' and 'sudo' community cookbooks, at a…
livin' the dream, brah!
The port shutdown was about the truckers, though there was some ILWU support - I have personally met ILWU leaders who were in support. The truckers are not allowed to unionize, are employed as "independent contractors",…
and we should expect them to!
Yes, now go away.
Are you posting from the 90s?
The anger is that I'm ashamed to be associated with most people in the tech community lately, wherever I can live, and that so many people who just moved to the bay area think they know so much about how they are…
The content of most of these comments should be unacceptable in any community.
The problem is not that Google, Facebook, and others are "solving a problem" by providing these bus fleets. They are offering jobs on the peninsula paying more than jobs tend to pay in SF [because SF companies have to…
I do about 30h of "work days" and easily more than 10h of off-hours, took me a few changes of venue to remove the requirement to be at my desk 8-9 hours a day, and I am more productive and happier.