{"generator":"GNU social 2.0.2-dev","title":"Conversation","totalItems":9,"items":[{"actor":{"id":"https:\/\/infosec.exchange\/users\/JSCybersec","displayName":"Jason Stuart","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/69746-original-tmp20250204184613.webp","rel":"avatar","type":"image\/webp","width":169,"height":169},{"url":"https:\/\/gnusocial.jp\/avatar\/69746-96-20250222060559.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/69746-48-20250222060528.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/69746-24-20250319120318.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"69746"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/69746-96-20250222060559.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"CyberSecurity and Governance Policy EnthusiastTwitter - Ya noI enjoy Gaming on my PC, gardening, fiddling with smartthing stuff (home automation and lighting). Open source enthusiast and pro union.","url":"https:\/\/infosec.exchange\/@JSCybersec","portablecontacts_net":{"preferredUsername":"JSCybersec","displayName":"Jason Stuart","note":"CyberSecurity and Governance Policy EnthusiastTwitter - Ya noI enjoy Gaming on my PC, gardening, fiddling with smartthing stuff (home automation and lighting). Open source enthusiast and pro union."}},"content":"

@hellomiakoda<\/a> Okay, so on each machine you want to connect to you add the publickey portion into the authorized_keys file for the user you're connecting as. Then the machine you're connecting from has to have the private key in the ssh profile (usually under the user home directory ~\/.ssh<\/p>

Then when you connect to the machine using your key. <\/p>

So say on \"remote\" machine I am user bob and on local machine I'm user bobmcbobberson.<\/p>

On remote machines bob profile I open the authorized_keys file under the bob\/.ssh folder and add my (bobmcbobberson) public key text into it)<\/p>

Then on my local machine I ssh into the remote machine -> ssh bob@remotemachine<\/p>

Depending on your key you might need to type a password to open the private section which will authenticate against the remote machine. If it prompts you for a password to connect to the remote machine then password auth is still enabled<\/p>","generator":{"id":"tag:gnusocial.jp,2026-04-10:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/infosec.exchange\/users\/JSCybersec\/statuses\/116375122012045613","object":{"id":"https:\/\/infosec.exchange\/users\/JSCybersec\/statuses\/116375122012045613","objectType":"note","content":"

@hellomiakoda<\/a> Okay, so on each machine you want to connect to you add the publickey portion into the authorized_keys file for the user you're connecting as. Then the machine you're connecting from has to have the private key in the ssh profile (usually under the user home directory ~\/.ssh<\/p>

Then when you connect to the machine using your key. <\/p>

So say on \"remote\" machine I am user bob and on local machine I'm user bobmcbobberson.<\/p>

On remote machines bob profile I open the authorized_keys file under the bob\/.ssh folder and add my (bobmcbobberson) public key text into it)<\/p>

Then on my local machine I ssh into the remote machine -> ssh bob@remotemachine<\/p>

Depending on your key you might need to type a password to open the private section which will authenticate against the remote machine. If it prompts you for a password to connect to the remote machine then password auth is still enabled<\/p>","url":"https:\/\/infosec.exchange\/@JSCybersec\/116375122012045613","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/pdx.social\/users\/hellomiakoda\/statuses\/116375086841698221","url":"https:\/\/pdx.social\/@hellomiakoda\/116375086841698221"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/pdx.social\/users\/hellomiakoda"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-04-09:objectType=thread:nonce=55056d8cd0f7bd2b","notice_info":{"local_id":"12428176","source":"ActivityPub"}},"published":"2026-04-10T06:34:11+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/infosec.exchange\/@JSCybersec\/116375122012045613"},{"actor":{"id":"https:\/\/pdx.social\/users\/hellomiakoda","displayName":"Miakoda","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/77908-original-tmp20230212094920.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/77908-96-20230215015028.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/77908-48-20230215015028.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/77908-24-20230215015028.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"77908"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/77908-96-20230215015028.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"I'm just a nerdy gamer. Computers are my tools, games are my escape.Current obsessions:Sentient robots PlaystationOpen Source Software#fedi22 #gaming #photograpgy #feminism #linux #anime #pdx #playstation","url":"https:\/\/pdx.social\/@hellomiakoda","portablecontacts_net":{"preferredUsername":"hellomiakoda","displayName":"Miakoda","note":"I'm just a nerdy gamer. Computers are my tools, games are my escape.Current obsessions:Sentient robots PlaystationOpen Source Software#fedi22 #gaming #photograpgy #feminism #linux #anime #pdx #playstation"}},"content":"

@JSCybersec<\/a> Yeah, I did know keys can have a password to decrypt the key.
See, I thought there was some master list of pub keys in the server. I didn't realize it was under ~\/.ssh.
So if a key is compramised, that's where I remove it from. Ooooh, is that why the keys have user@client in them?! So I can find which one is what?!<\/p>","generator":{"id":"tag:gnusocial.jp,2026-04-10:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/pdx.social\/users\/hellomiakoda\/statuses\/116375591659614680","object":{"id":"https:\/\/pdx.social\/users\/hellomiakoda\/statuses\/116375591659614680","objectType":"note","content":"

@JSCybersec<\/a> Yeah, I did know keys can have a password to decrypt the key.
See, I thought there was some master list of pub keys in the server. I didn't realize it was under ~\/.ssh.
So if a key is compramised, that's where I remove it from. Ooooh, is that why the keys have user@client in them?! So I can find which one is what?!<\/p>","url":"https:\/\/pdx.social\/@hellomiakoda\/116375591659614680","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/infosec.exchange\/users\/JSCybersec\/statuses\/116375122012045613","url":"https:\/\/infosec.exchange\/@JSCybersec\/116375122012045613"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/infosec.exchange\/users\/JSCybersec"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-04-09:objectType=thread:nonce=55056d8cd0f7bd2b","notice_info":{"local_id":"12428177","source":"ActivityPub"}},"published":"2026-04-10T06:34:10+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/pdx.social\/@hellomiakoda\/116375591659614680"},{"actor":{"id":"https:\/\/infosec.exchange\/users\/JSCybersec","displayName":"Jason Stuart","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/69746-original-tmp20250204184613.webp","rel":"avatar","type":"image\/webp","width":169,"height":169},{"url":"https:\/\/gnusocial.jp\/avatar\/69746-96-20250222060559.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/69746-48-20250222060528.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/69746-24-20250319120318.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"69746"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/69746-96-20250222060559.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"CyberSecurity and Governance Policy EnthusiastTwitter - Ya noI enjoy Gaming on my PC, gardening, fiddling with smartthing stuff (home automation and lighting). Open source enthusiast and pro union.","url":"https:\/\/infosec.exchange\/@JSCybersec","portablecontacts_net":{"preferredUsername":"JSCybersec","displayName":"Jason Stuart","note":"CyberSecurity and Governance Policy EnthusiastTwitter - Ya noI enjoy Gaming on my PC, gardening, fiddling with smartthing stuff (home automation and lighting). Open source enthusiast and pro union."}},"content":"

@hellomiakoda<\/a> So the private key portion you use to authenticate against the public key portion which is uploaded to the server is supposed to be the portable secured portion. Basically that would be secured on a hardware token or encrypted USB. And you'd be able to move that from machine to machine but never copying the private key to a foreign machine.<\/p>

So what is your use case, I might be able to add more clarity if I understand how you're planning to use it.<\/p>

EDIT: Just re reading this and I've confused myself now. So even I need to re-read how it works LOL.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-04-10:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/infosec.exchange\/users\/JSCybersec\/statuses\/116375020516959099","object":{"id":"https:\/\/infosec.exchange\/users\/JSCybersec\/statuses\/116375020516959099","objectType":"note","content":"

@hellomiakoda<\/a> So the private key portion you use to authenticate against the public key portion which is uploaded to the server is supposed to be the portable secured portion. Basically that would be secured on a hardware token or encrypted USB. And you'd be able to move that from machine to machine but never copying the private key to a foreign machine.<\/p>

So what is your use case, I might be able to add more clarity if I understand how you're planning to use it.<\/p>

EDIT: Just re reading this and I've confused myself now. So even I need to re-read how it works LOL.<\/p>","url":"https:\/\/infosec.exchange\/@JSCybersec\/116375020516959099","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/pdx.social\/users\/hellomiakoda\/statuses\/116374784149005112","url":"https:\/\/pdx.social\/@hellomiakoda\/116374784149005112"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/pdx.social\/users\/hellomiakoda"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-04-09:objectType=thread:nonce=55056d8cd0f7bd2b","notice_info":{"local_id":"12424742","source":"ActivityPub"}},"published":"2026-04-09T13:55:23+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/infosec.exchange\/@JSCybersec\/116375020516959099"},{"actor":{"id":"https:\/\/pdx.social\/users\/hellomiakoda","displayName":"Miakoda","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/77908-original-tmp20230212094920.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/77908-96-20230215015028.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/77908-48-20230215015028.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/77908-24-20230215015028.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"77908"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/77908-96-20230215015028.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"I'm just a nerdy gamer. Computers are my tools, games are my escape.Current obsessions:Sentient robots PlaystationOpen Source Software#fedi22 #gaming #photograpgy #feminism #linux #anime #pdx #playstation","url":"https:\/\/pdx.social\/@hellomiakoda","portablecontacts_net":{"preferredUsername":"hellomiakoda","displayName":"Miakoda","note":"I'm just a nerdy gamer. Computers are my tools, games are my escape.Current obsessions:Sentient robots PlaystationOpen Source Software#fedi22 #gaming #photograpgy #feminism #linux #anime #pdx #playstation"}},"content":"

@JSCybersec<\/a> I'm trying to set it up for local machines that don't really need the extra security, so that I can learn and understand this overlooked section of Linux knowledge<\/p>","generator":{"id":"tag:gnusocial.jp,2026-04-10:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/pdx.social\/users\/hellomiakoda\/statuses\/116375086841698221","object":{"id":"https:\/\/pdx.social\/users\/hellomiakoda\/statuses\/116375086841698221","objectType":"note","content":"

@JSCybersec<\/a> I'm trying to set it up for local machines that don't really need the extra security, so that I can learn and understand this overlooked section of Linux knowledge<\/p>","url":"https:\/\/pdx.social\/@hellomiakoda\/116375086841698221","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/infosec.exchange\/users\/JSCybersec\/statuses\/116375020516959099","url":"https:\/\/infosec.exchange\/@JSCybersec\/116375020516959099"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/infosec.exchange\/users\/JSCybersec"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-04-09:objectType=thread:nonce=55056d8cd0f7bd2b","notice_info":{"local_id":"12424744","source":"ActivityPub"}},"published":"2026-04-09T13:55:22+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/pdx.social\/@hellomiakoda\/116375086841698221"},{"actor":{"id":"https:\/\/chaosfem.tw\/users\/KatS","displayName":"Kat S","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/165053-original-tmp20230918162647.webp","rel":"avatar","type":"image\/webp","width":50,"height":50},{"url":"https:\/\/gnusocial.jp\/avatar\/165053-96-20231001121545.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/165053-48-20231001121545.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/165053-24-20231001121545.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"165053"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/165053-96-20231001121545.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"GenX, autistic, agender transfem dyke. Goth and aspiring musician\/artist. At least as feline as the profile pic implies."I'm trying to figure out which scifi novel\u00a0you stepped out of"~ screwlisp"Adorably dense"~ The Witch of Crow BriarI miss crows. Crows are nice.Follow requests are subject to a vibe-check to weed out bots, trolls, troublemakers and wet blankets. An empty bio and no\/minimal posting history makes you look like a bot or a sockpuppet.Profile picture: a charcoal sketch of a cat sitting on a tree-stump, looking away from the viewer.The cat's head is tilted in a way that makes it look contemplative but, honestly, she probably just slipped a mental cog and now her brain is in some kind of phantom neutral.","url":"https:\/\/chaosfem.tw\/@KatS","portablecontacts_net":{"preferredUsername":"KatS","displayName":"Kat S","note":"GenX, autistic, agender transfem dyke. Goth and aspiring musician\/artist. At least as feline as the profile pic implies."I'm trying to figure out which scifi novel\u00a0you stepped out of"~ screwlisp"Adorably dense"~ The Witch of Crow BriarI miss crows. Crows are nice.Follow requests are subject to a vibe-check to weed out bots, trolls, troublemakers and wet blankets. An empty bio and no\/minimal posting history makes you look like a bot or a sockpuppet.Profile picture: a charcoal sketch of a cat sitting on a tree-stump, looking away from the viewer.The cat's head is tilted in a way that makes it look contemplative but, honestly, she probably just slipped a mental cog and now her brain is in some kind of phantom neutral."}},"content":"

@hellomiakoda<\/a> Not a stupid question at all; it's a common enough challenge to overcome.
I've been known to pull the following old-sysadmin dirty hack:<\/p>