That's a meme page. Do NOT submit your real private keys!

all 27 comments

sorted by: hot top controversial new old
[–] 84 points 1 year ago (2 children)

That’s a meme page. Do NOT submit your real private keys!

Don't tell me what to do with my employers keys.

  • source
  • hideshow 2 child comments
  • [–] 31 points 1 year ago

    Page claims to be IPv6 ready...does not actually have an IPv6 address. This isn't a meme, this is a crime

  • source
  • [–] 29 points 1 year ago (2 children)

    To save anyone the trouble, here's a key I've generated just now:

    -----BEGIN OPENSSH PRIVATE KEY-----
    b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
    QyNTUxOQAAACAqTGrNcWWZrKjDzAgG1KaCYAOOAoqSSQvvWVgUx7PdMgAAAJgzuRsTM7kb
    EwAAAAtzc2gtZWQyNTUxOQAAACAqTGrNcWWZrKjDzAgG1KaCYAOOAoqSSQvvWVgUx7PdMg
    AAAEC8jODzrMngnvJlMwtlhqwlI6qS42WlzSDADbEYaCsRzCpMas1xZZmsqMPMCAbUpoJg
    A44CipJJC+9ZWBTHs90yAAAAEXUwX2E0MzhAbG9jYWxob3N0AQIDBA==
    -----END OPENSSH PRIVATE KEY-----
    

    (and if I did it wrong enough, well, you can hack me but please let me know how I fucked up)

    Change any random character in there to see how the website reacts to a unique key. I changed an O to an o and it accepted it.

  • source
  • hideshow 2 child comments
  • [–] 18 points 1 year ago

    FWIW this is what I did:

    $ ssh-keygen -f fake_ssh_key
    

    (press Enter twice for no passphrase)

    and then:

    $ cat fake_ssh_key
    

    Which I then just copy-pasted from the terminal. Surely this can't reveal anything about my other private keys, right?

  • source
  • parent
  • [–] 58 points 1 year ago* (4 children)

    I went to a similar site, but instead of checking private keys it checked all my credit cards to make sure they weren't on the dark web.

    /s

  • source
  • hideshow 4 child comments
  • [–] 14 points 1 year ago (2 children)

    Also, check if your PIN has been leaked as well! https://pastebin.com/Nn2ZcdfC

  • source
  • parent
  • hideshow 2 child comments
  • [–] 28 points 1 year ago (2 children)

    It says it IPv6 ready but doesn't even have any AAAA DNS records.

    It does use TLS 1.3, but only AES 128 bits for me.

  • source
  • hideshow 2 child comments
  • How do I upload from my company's yubikey?

  • source
  • [–] 14 points 1 year ago (1 child)
  • [–] 8 points 1 year ago (1 child)

    I just gave away my private key used to access my vps via ssh.

    The website is secured with SSL ✓ and network traffic encrypted with TLSv1.3 ✓. Furthermore, the website uses IPv6 ✓ and my private key is encrypted with AES256 ✓✓✓. Nobody else can access it.

  • source
  • hideshow 1 child comment
  • [–] 6 points 1 year ago (2 children)

    The disclaimer ruins the joke

  • source
  • hideshow 2 child comments
  • [–] 5 points 1 year ago
    [–] 5 points 1 year ago (1 child)
  • [–] 2 points 1 year ago

    the answer is yes

  • source