3 ms·
No, this is people committing their private keys to a Github repository. Github is not at fault. edit: submitter has since updated the title, was: "Github givi
by aaronpk 14y ago
No, this is people committing their private keys to a Github repository. Github is not at fault.
edit: submitter has since updated the title, was: "Github giving away your private key"
- pnathan 14y agoSeriously. It looks like people have added their private keys to (public!!!) repos, and voila, a search allows others to find that.
- dhimes 14y agoI had a dev send me his. I guess he doesn't understand the whole key-thing. Now he doesn't log in to my server. Just sends me a zip-file that I unpack and test. sigh.
- dhimes 14y agoOn re-reading, I need to clarify: I asked a dev for his public key so I could give him access to my server, and he sent me his private key. Yikes!
- truxs 14y agoI would say it's shared responsability. Yes commiting private data is stupid, and the other hand, just testing the new sesarch by trying to search for rsa key could Have Avoided this. Anyway, as usual the main problem exist between the chair and the keyboard.
- jamesaguilar 14y agoYou could find these on Google (site:github.com id_rsa) before Github search, so I guess that Github search caused zero net harm.