Stack Exchange Network
Stack Exchange network consists of 181 Q&A communities including
Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
Visit Stack Exchange
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
Anybody can ask a question
The best answers are voted up and rise to the top
9 years, 8 months ago
I am used to version control most of my dot files and push them to a repository on GitHub. I would also like to add
~/.ssh/config to have an up-to-date configuration on all machines.
Could an attacker benefit from having the host names listed in a publicly available
Jul 19, 2013 at 15:30
233 1 1 silver badge 5 5 bronze badges
Typically not, but there are certain targeted attack cases where this might be useful. The more likely danger is that you'd accidentally commit some sensitive bit information that you didn't intend to have there.
If you're using github for storing personal files, do yourself (and github) a favor and pay the $7 to get private repos.
Jul 19, 2013 at 19:26
82.8k 26 26 gold badges 149 149 silver badges 230 230 bronze badges
Having host names only gives a name to an IP. They could just as easily look up DNS records and pull them if they are public.
But in all honestly, a host name shouldn't be a security risk unless you run out of date services on your machines.
Obscurity =/= Security.
15.2k 5 5 gold badges 62 62 silver badges 91 91 bronze badges
Jul 19, 2013 at 15:39
Travis Thompson Travis Thompson
539 1 1 gold badge 5 5 silver badges 9 9 bronze badges
it could expose the customers/projects you woirk for or with and could give attackers a hint, esp. for spear-phishing.
if you have access to server-resources i'd advise you to use a controlled git-server via
i'd NEVER store anything on github/bitbucket that hasnt the lable GPL or OpenSource, even if it is a private repo.
Jul 23, 2013 at 7:35
log in to answer this question.
Not the answer you're looking for? Browse other questions tagged
By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our
Accept all cookies
Necessary cookies only