Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> You can combine this fact with zsh's autocomplete powers,

I found that recent versions of SSH have begun hashing `~/.ssh/known_hosts` which nerfed zsh autocomplete pretty badly. You need to set "HashKnownHosts no" in `~/.ssh/config`. The SSH change was made to prevent a key compromise from giving an attacker a ready-made list of vulnerable next targets.



But can't they also just find the hosts by looking at your bash history?


Bash history rotates (or can be managed, which a lot of people do), whereas known_hosts will have every server you ever accessed and is rarely ever touched.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: