• 1 Post
  • 29 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle



  • I just moved into a house with my friend and he gave me full reign to smart home the house. Every light has an Innr Zigbee bulb, which are great for having colors during parties and color temperature throughout the day (Adaptive Lighting in HACS), as well as motion controls in the hallway (which has a broken 2 way switch) and kitchen. The front porch light turns on when I come home if I’m on foot, and the back porch light comes on if I’m driving. The lights in the living room turn down if something’s playing and it pauses if I leave the room. We’ve got an old android tablet I stole from the trash on the kitchen wall for a shopping list as well as an overview of the house. They washer and dryer have vibration sensors so we get an alert on our Google homes when our load is finished (we’re both forgetful as fuck). I had an extra contact sensor left over from the doors that I put on the mailbox, so we get a nice AOL “you’ve got mail” when the mailman comes.

    Frankly I don’t know how I survived without automation. I forget things so much less now.














  • It’s not “best practice”, but a compromised key is a compromised key whether that key is used to connect 1 or 100 computers to a server. No, I can’t shut off access to exactly one machine, I do not however have any difficulty in shutting off access to every machine and replacing it with a new key. Your system and my system are no different with a single compromised key.

    If I had 100 computers that I had to change identity files on each time it was compromised, and my keys were being compromised often, I would see a benefit from using multiple different keys.

    Quit acting like I’ve left the front door to my house open when the door is locked but my roommate and I share the same key.



  • Again, I know it’s not amazing security but it’s not inherently bad. The key (actually encrypted), if (not when) compromised would provide the same level of access to my system as having two keys with one compromised. Assuming I’m an all knowing wizard and can smell when a key is compromised, I can log in remotely and replace the old key with a freshly generated one. More likely however is that if anybody was going to actually do something with my compromised key, they’d clear my authorized_keys file and replace it with a key I don’t have access to. Don’t kid yourself into thinking having multiple keys suddenly makes you 10x more secure.

    What’s more likely is someone finds my flashdrive on the ground, goes “oh boy free flashdrive full of Linux ISOs and recovery tools!” And proceeds to wipe it and use it for their own shit, while I regenerate a new key when I notice it missing.


  • I use the same identity file for all of my computers. I don’t have password auth enabled on my server and it’s an extreme inconvenience when I’m on a new machine and have to dig out a different machine to get a copy of my new key to the server. Best practice? Probably not, but I’d rather that than having password auth enabled. I keep an encrypted copy of my id_rsa on my thumb drive so I’ve always got it when I need it.

    I had never personally heard of ConnectBot, but it says last updated in February of this year on Google Play. I don’t see a real reason to use it over Termux however.