By John Gruber
WorkOS Radar:
Protect your app against AI bots, free-tier abuse, and brute-force attacks.
Dave Dribin:
Yeah, okay, you can now get into remote machines without typing a password, but so can someone else if they get access to your account. Leaving your private key unprotected without a passphrase is like not having a PIN on your ATM card. It’s just asking for trouble.
Update: Dribin has a follow-up with some caveats regarding SSHKeychain.
★ Tuesday, 21 August 2007