I often ssh into my machine from my work PC. At first I log in with a password, but then I realised it is pretty risky, as the sysOp could have been logging what I type all way long.
So I decided to try disposable passwords (OTPW): I always carry with me a sheet of paper with those disposable passwords; when the need arises I can log via ssh to my machine with them.
I understand that it is always risky to use a compromised machine for sshing (and as I don't own this work pc, it can safely be assumed compromised), but I was trying to assess more precisely such risks.
So the question is: what methods could an evil sysAdmin use to access my personal data, given this setup?. I thought of:
- *log what is displayed in my monitor*: I seldom ssh to get personal info. More often is because I know the tools on my *nix machine better than my tools on my work pc (vim, ghc, newsbeuter, mutt) - steal and make a copy of my paper sheet: I keep count of the number of times I log via 'paper password', and made .bashrc display it at every ssh login, so I would at least know that my machine has been compromised - beat the crap out of me - ...