But that's not what Linode did. Linode put the private key right next to the public key, where anyone who compromised their web frontend could get at it. If th

But that's not what Linode did. Linode put the private key right next to the public key, where anyone who compromised their web frontend could get at it. If they had kept their private key where it belonged, we wouldn't be having this discussion because their security alert would have said "...and we have verified that no credit card data was accessed".