← Back to team overview

osdf-devteam team mailing list archive

Potential security risk with launchpad and SSH keys

 

I've noticed when you generate an SSH key, the program will place a comment at the end of the key file in the form username@machinename. Launchpad will print this comment in your user profile, so anyone that accesses your lp profile will know your username if you happen to have saved a key there.

I recommend opening the public key file and changing your username to something else.



Follow ups