Atemu, 1 year ago

Unless some sandboxing or other explicit security measure is in place, any software you run typically has access to your entire home directory, including .ssh/. If any one of those was compromised somehow, they’ve got access to your SSH keys.

That’s a gigantic attack surface if you ask me.