12 ms·
Is it a good idea to check created_at != updated_at ? People update public keys very rarely. I would even say NEVER. Just make an sql against your table to se
by homakov 15y ago
Is it a good idea to check created_at != updated_at ?
People update public keys very rarely.
I would even say NEVER.
Just make an sql against your table to see what are the most possibly are malicious keys.
(i see no reason to update timestamps doing 'the trick'. I believe attackers didn't)
- aparadja 15y agoThe vulnerability probably also allowed the attacker to edit the created_at and updated_at columns in the ssh key table.