Revoking the SSH Keys of a Friend Sucks

https://reddthat.com/post/1044858

Revoking the SSH Keys of a Friend Sucks - Reddthat

I’m just going to be vulnerable for a minute here. I met the first person in real life who had similar server-y linux-y obsessions to me and we’d send ebay links of systems to drool over to eachother. Then ended up being a terrible person but hid it from me pretty well until they couldn’t anymore and now I no longer have someone to chat with about those things. So um, I guess I’m open for applications for the position of “nerdy friend who I nerd to hard with about network infrastructure and Linux packages” now

Brutal. However, there’s plenty of us who fit that bill here, I’m sure.
[email protected] is one of the biggest communities on that instance (and therefore also likely one of the biggest in the entire fediverse, since that instance is so big). In other words, I think you might be right, LOL.

Your public key is no longer in my ~/.ssh/authorized_keys :(

That’s a serious breakup, can’t say I’ve even had anyone that close. Finding the right friends is like finding the right distro and it hurts when someone shows you an ugly part of them (ahem Red Hat).

It was just access to a VPS we had a couple of minor things running on so nothing too big, but still its a very real action that says “this is over” so hitting Ctrl+O then Ctrl+X was pretty heavy

You don’t use vim? I do not see how anyone could be friends with you.

jk, of course.

Yeah, :wq! Hits a lot harder than a Ctrl+x and Ctrl+o
I still use vim to this day. Mainly cause I can’t figure out how to quit…
Newb. You just hard-reboot
It sucks but be sure to remove every means of potential attacks
I don’t want access to your server but I’m more than willing to chit chat Linux and FLOSS stuff

i don’t want to chit chat, i just want access to his server.

(kidding of course)

Sorry bud.

Though this got me thinking can there be a specific message to a specific user attempting to login (and deny their login)?

You could create a login banner and just delete their account
I had a similar, we'd kept an IRC channel open for years, then he went off the deep end with conspiracies and I cut contact. I miss my friend but that friend was a chill software geek, not the rage addicted lunatic who took his place.
There is no other place like 127.0.0.1
::1 is a compelling alternative

::1 and the same?

...ok that was a bad pun

Never apologize for puns. Each one is glorious.

I’m a sysadmin by trade. But my coworkers don’t know about my secret identity; I deal with storage clusters and networks during daytime, but when my kids go to bed I put on my superhero gear and unleash upon the city my secret identity of… still being a sysadmin, still tinkering with storage clusters and networks.

It’s a work hazard of mine: Loads of hardware that is past its lifetime at work, but too good to throw away. The result is that I have a server room in my house with various Dell machines and 40gig fiber tying it all together.

I recently went back to college and got a network engineer degree then stumbled into a super chill Origami admin role. I swear it’s the middle management IT without actually managing anyone. I sit in meetings, reset passwords and occasionally make changes to the production database!

I just make sure to tinker on the side to keep myself sane and keep the skills sharp. I want to get more than a random old laptop running docker going (there’s some fun stuff I could do with routing in that I really want to play with sometime) but I’ve got grownup responsibilities to catch up with that I neglected while returning to college before I can do that

Fun stuff with routing? Do tell.

So with the way my house is laid out it and the difficulty in running network cables it would really make sense to put the server rack in the spider-filled basement, and a network switch on each floor. But while thinking about cost effective ways to achieve that (including use of the long distance stacking feature of the classic Brocade ICX switches or just running some of those Chinese 2.5G softrouter boxes) I keep coming back to this idea of instead setting up a BGP routed WAN or similar.

By running redundant cables I gain resilience against the chaos I live in (multiple kids and pets plus pretty frequently reorganizing furniture to get all of us to fit comfortably in our 1200 square foot starter house) plus by using a routing protocol like BGP it should do some amount of load balancing to allow more bandwidth between clients (I find peer to peer network technologies super neat so i love experimenting with them) but the thought also comes to use those Microtik router cards for even more bandwidth

Honestly it’s a lot of ideas I’ve been bouncing around while my family spends all of my hobby money on things like mini vacations that we can all enjoy

Sounds like you absolutely should run a lot of redundant cables and making sure your house is a micro-internet.

At my (allmost 100 years old. Built in 1929) house there are two chimneys that are no longer in use, so I use them for cable runs. My server room is in yhe basement, so all of the wired stuff is there. From a PoE switch I have cables going into the chimney, going to each floor for powering access points.

I’m sure that my kids will want wired network, so at that point I’ll replace the top floor AP with a switch, and use the associated chimney-cable as VLAN trunk instead.

Right now my biggest annoyance is that I want to replace my ISPs router with something rack mounted. Their Tilgin router/modem is the only part of the network that is not compatible with a 19" rack.

You can say what you want about Fortinet, but I kinda like them, and after replacing the work networks with cloud managed routers I have quite a few Fortigate 101E left over. If I keep them up to date I should be fine.

My go-to switches are Aruba of various sorts. I have two 2930M and one 3810M. Also leftovers from work after going for something cloudanaged.

Letting Go

xkcd
There’s an xkcd for everything
It there an xkcd for coming into the comments and saying there’s and xkcd for everything?
It’s not an official one: thomaspark.co/2017/01/relevant-xkcd/
Relevant XKCD | Thomas Park

Footnotes An xkcd tribute inspired by what has become a meme. Also inspired by all things recursive like We Become What We Behold and xkcd itself. Made with the official xkcd font. Can you guess which xkcd this was traced from? Winner gets seven Vienna Fingers cookies. If you click enough times, this is actually

Thomas Park | On web development, interface design, user research, and all the rest
Curious about what you discovered about them and how they were hiding it
I’d like to apply because I am always looking for someone passionate about open source, Linux, and BSD - also networks galore. I currently run my own Mastodon and Lemmy instances. Please look me up on Mastodon at HousePanther. I am sorry your friend turned out to be an asshole and did you dirty. That’s not cool at all! There are good people out there.
Black Cat - Mastodon

This is just a general purpose server for one user.

Mastodon hosted on mstdn.goblackcat.com

Im sorry that this happened to you. It sucks to learn that someone isn’t who you thought they are after you trust them.

I’m a network engineer by trade and a Linux enthusiast, and happily apply for the position 😊

I hope that one day there will be a larger community of network engineers on Lemmy, however it seems that most did not make the migration off of that old site.

I'm coming up on 45 years being friends with a fellow nerd and we talk about all sorts of things that I have nobody else I could talk to about that stuff. I'm pretty thankful and I'm pretty sure that it'll end with one of us dying.
…in ethernet cables 😂

Sorry to hear that. I’ve had a similar thing happen before, it sucks.

I’m not super dependable tbh, but I always make an effort to communicate as much as I can with folks. Feel free to hmu on DM, we can connect on other platforms if you wanna.

Otherwise, best of luck, you’ll find a new buddy :)

Someone can never have enough nerdy friends just you do have to be rather selective…I’m open for nerdy friends 😂
What made them so terrible?
If you wanna chat, you can contact me on matrix (if i have it set up right): @jsnfwlr:matrix.home.phalacee.com