Eric Schaefer
about github bsky 💦 RSS feed

Stop forwarding your SSH agent to remote machines

ChatGPT desktop (and probably other AI agents) can and do forward your SSH agent to remote machines. I did not even imagine this is possible, but it is. I was made aware of this in a discussion here on HN. Some users pointed out that using Secretive can help you prevent this, using the macOS Secure Enclave. This requires a TouchID or proper authentication before a local SSH key is used.