Reputation
886
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
8 17
Impact
~730k people reached

Feb
29
answered SSH public key added but still prompt for password
Feb
29
comment SSH public key added but still prompt for password
Interesting question. I'll turn my comments into an answer; I guess that would be best.
Feb
29
comment SSH public key added but still prompt for password
Check also this list at U&L site: unix.stackexchange.com/questions/16978/…
Feb
29
comment SSH public key added but still prompt for password
What are the permissions of ~/.ssh directory? If they're not rwx------ (700) or r-x------ (500) and directory owner+group=user's (htpc here), then the authorized_keys file is also ignored. Next up: check that your local key from /home/mikeyr/.ssh/id_rsa.pub is listed in remote .ssh/authorized_keys
Feb
29
awarded  Popular Question
Jan
23
awarded  Good Answer
Nov
16
comment What is compatible Font for both Linux and Windows by their default?
@Oli: ...but then you need to check for license compatibility. Not convinced this is a saner territory ;) Just kidding, there's plenty of usable, license-compatible fonts for most licenses nowadays.
Oct
10
awarded  Benefactor
Oct
10
awarded  Scholar
Oct
10
accepted Only use Mass Storage devices on a selected USB port - how?
Oct
10
comment Only use Mass Storage devices on a selected USB port - how?
@FuzzyToothpaste: Thanks for the reminder.
Oct
7
awarded  Nice Question
Oct
7
comment Only use Mass Storage devices on a selected USB port - how?
@Whaaaaaat: I have gone through the usual checklist - password-protected BIOS, only allow boot from the internal CD-ROM (read-only by design, not physically accessible), minimal user rights, disable CAD and Magic SysRQ, etc.; none of that guarantees perfect security, but each of it helps.
Oct
7
revised Only use Mass Storage devices on a selected USB port - how?
this is not a magic security dust - just one layer of defense
Oct
7
comment Only use Mass Storage devices on a selected USB port - how?
@Whaaaaaat: I'm not looking for a 100% gold-plated solution: I'm fully aware that the only safe computer is switched off, in a block of concrete, at the bottom of Mariana Trench. A determined enough attacker can get through any defense; it doesn't follow that I should leave the system unsecured against a drive-by attack on LHF.
Oct
7
comment Only use Mass Storage devices on a selected USB port - how?
@Whaaaaaat: When I was testing this, the usb-storage driver got loaded right before the block device(s) were created; mounting them was not necessary.
Oct
6
revised Only use Mass Storage devices on a selected USB port - how?
added physical security considerations
Oct
6
comment Only use Mass Storage devices on a selected USB port - how?
@BrianZ: I'll see how well the bounty goes; I've already received several useful pointers here in the comments. I have indeed been choosing between here and SE for this question.
Oct
6
comment Only use Mass Storage devices on a selected USB port - how?
@alci: That looks promising, thank you! Will look into this.
Oct
6
comment Only use Mass Storage devices on a selected USB port - how?
@Whaaaaaat: As for physical access - I agree completely. The other ports are not physically accessible to the users, and disassembling the case (or the keyboard, in order to splice into the USB cable) should be suspicious enough to get the user evicted from the premises in short order.