That’s a meme page. Do NOT submit your real private keys!

  • Korhaka@sopuli.xyz
    link
    fedilink
    English
    arrow-up
    80
    ·
    10 天前

    That’s a meme page. Do NOT submit your real private keys!

    Don’t tell me what to do with my employers keys.

  • oleorun@lemmy.fan
    link
    fedilink
    arrow-up
    55
    arrow-down
    1
    ·
    edit-2
    10 天前

    I went to a similar site, but instead of checking private keys it checked all my credit cards to make sure they weren’t on the dark web.

    /s

  • Scoopta@programming.dev
    link
    fedilink
    arrow-up
    30
    ·
    10 天前

    Page claims to be IPv6 ready…does not actually have an IPv6 address. This isn’t a meme, this is a crime

  • NeatNit@discuss.tchncs.de
    link
    fedilink
    arrow-up
    29
    ·
    10 天前

    To save anyone the trouble, here’s a key I’ve generated just now:

    -----BEGIN OPENSSH PRIVATE KEY-----
    b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
    QyNTUxOQAAACAqTGrNcWWZrKjDzAgG1KaCYAOOAoqSSQvvWVgUx7PdMgAAAJgzuRsTM7kb
    EwAAAAtzc2gtZWQyNTUxOQAAACAqTGrNcWWZrKjDzAgG1KaCYAOOAoqSSQvvWVgUx7PdMg
    AAAEC8jODzrMngnvJlMwtlhqwlI6qS42WlzSDADbEYaCsRzCpMas1xZZmsqMPMCAbUpoJg
    A44CipJJC+9ZWBTHs90yAAAAEXUwX2E0MzhAbG9jYWxob3N0AQIDBA==
    -----END OPENSSH PRIVATE KEY-----
    

    (and if I did it wrong enough, well, you can hack me but please let me know how I fucked up)

    Change any random character in there to see how the website reacts to a unique key. I changed an O to an o and it accepted it.

    • NeatNit@discuss.tchncs.de
      link
      fedilink
      arrow-up
      18
      ·
      10 天前

      FWIW this is what I did:

      $ ssh-keygen -f fake_ssh_key
      

      (press Enter twice for no passphrase)

      and then:

      $ cat fake_ssh_key
      

      Which I then just copy-pasted from the terminal. Surely this can’t reveal anything about my other private keys, right?

  • Anafabula@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    28
    ·
    10 天前

    It says it IPv6 ready but doesn’t even have any AAAA DNS records.

    It does use TLS 1.3, but only AES 128 bits for me.

    • tfm@piefed.europe.pubOP
      link
      fedilink
      English
      arrow-up
      28
      ·
      10 天前

      Always great to see people who check security before putting their personal information in somewhere

    • Scoopta@programming.dev
      link
      fedilink
      arrow-up
      8
      ·
      10 天前

      Glad to see I’m not the only one checking for a AAAA. Looked like a cool and useful site /s but I only use sites with v6.

  • asudox@lemmy.asudox.dev
    link
    fedilink
    arrow-up
    8
    ·
    edit-2
    10 天前

    I just gave away my private key used to access my vps via ssh.

    The website is secured with SSL ✓ and network traffic encrypted with TLSv1.3 ✓. Furthermore, the website uses IPv6 ✓ and my private key is encrypted with AES256 ✓✓✓. Nobody else can access it.