I am trying to find out a "safe" solution for the following situation.
tl;dr how to keep things secure in an environment that is absolutely not?
I work in a company where workstations are not safe at all, i.e. there is a root-like user on every system.
Basically everyone, and anyone, would be able to find the password for this user, and therefore would have access to any computer and anyone's files or documents that's there. (Yes there is a huge security problem here for Linux stations, but let's not focus on this, I cannot do anything about it...)
Knowing this, I try not to keep anything personnal or sensitive on the computer. However, I bothers me when it comes to ssh keys that are linked to some of my personnal accounts. The same goes for any ssh-config files, and for anything.
I have yet avoided to link ssh-keys from this computer to any account so far but there is obviously a better way to handle this. I understand that setting a passphrase for an ssh key should make it unusable for anyone not having the passphrase. Then, how should I deal with ssh-agent, should I stop using this to strenghthen security here?
- Am I correct in my assumptions?
- What can I do to do things as securely as possible, what would be the way to go?
PS: Security here is not an absolute requirement, it is more about understanding how it works, and how I could protect myself / my privacy better. I am not looking for extremly sophisticated workarounds or overkill parano-things.
I guess having another computer that's not a gigantic security hole would be a great way to start, but this is not an option.