Hardware Touch, Stronger SSH
Daniel Farina Founder / CTO
Every time I log into a server or push code to GitHub, a small USB key on my laptop flashes. I have to touch it to continue. That extra tap blocks a class of attacks that’s far more common now than twenty years ago: malware stealing or abusing your SSH keys. Setting this up takes little more effort than distributing new SSH keys every couple of years. In this post I’ll cover why you should take that extra time and explain how to use the technology you can adopt to achieve this.
Covered below are:
Why malware on developer laptops is a real threat today
How touch-verified SSH stops it
Practical implementation techniques
Why you should care Twenty years ago, my rough education about malware attacks suggested they: Targeted Windows primarily
Affected non-technical staff more often
... continue reading