FiloSottile/whoami.filippo.io

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

2361 stars · 113 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A public SSH server (written in Go) that identifies visitors by enumerating the public keys their SSH client offers and matching them against a dataset of GitHub users' public keys. It demonstrates a privacy side-channel in SSH public key authentication and shows how to mitigate it.

Use cases

• demonstrate how ssh leaks public keys to servers
• find which github account my ssh key belongs to
• learn about ssh publickey authentication behavior
• show a demo of key enumeration privacy risk
• configure ssh to stop offering keys to every host

When to choose

• you want a hands-on demo of SSH public key enumeration
• you're teaching or writing about SSH privacy leaks
• you want to check which GitHub identity your SSH client exposes

When to avoid

• you need a production SSH server for real authentication
• you want to harden your own infrastructure rather than demo a leak
• you need a general-purpose identity verification service

Facets

service · maturity stable

ssh security privacy security privacy developer-tools windows cross-platform ssh-server public-key-enumeration github-api demonstration go linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="FiloSottile/whoami.filippo.io")