Welcome, Guest: Register On Nairaland / LOGIN! / Trending / Recent / New
Stats: 3,193,949 members, 7,952,823 topics. Date: Thursday, 19 September 2024 at 04:28 AM

SSH Keys Generated On Debian Vulnerable - Programming - Nairaland

Nairaland Forum / Science/Technology / Programming / SSH Keys Generated On Debian Vulnerable (737 Views)

Why Is My Androidvnc Not Connecting To Debian?? / Help In Updating And Upgrading Debian Gnu/linux 7.0_kali_ / I Doubt If You All Know The Name Of Some Of The Keys On An English Keyboard! (2) (3) (4)

(1) (Reply)

SSH Keys Generated On Debian Vulnerable by mmsen: 11:57pm On Jun 03, 2015
Back in 2008 Github account holders were strongly advised to discontinue use of any SSH keys generated on Debian based systems (including Ubuntu) as they were deemed too weak to be considered safe - the pool of numbers used to create the keys was said to make cracking said keys 'trivial'. Users were told to patch their Debian based systems and update their keys.

The issue appears to have resurfaced seven years later, with Github staff finding that many users did not take heed of the advice given back then. It has been established that there were, at least 94 keys, on GitHub that contained the Debian-derived weakness. The staff have since revoked many of the keys, as a way of protecting themselves from blame and bad press.

Keys found on Github allow users acces to public repository accounts belonging to the likes of Spotify, Yandex, and UK government developers.

http://afritechnet..ae/2015/06/github-ssh-keys-generated-on-debian.html
Re: SSH Keys Generated On Debian Vulnerable by Fulaman198(m): 12:47am On Jun 04, 2015
Wow dang, this is useful information. Thanks for posting this. I better not try SSH'ing from a Debian-based Linux machine then.
Re: SSH Keys Generated On Debian Vulnerable by mmsen: 1:16am On Jun 04, 2015
If you apply the patches and ensure that your repos are up to date then you should be ok.

Just don't use keys from 2006-2008.

1 Like

(1) (Reply)

All You Need To Know About Coding In One Image / Create Your Professional Site Here / SIZE CHARTS For Magento 2

(Go Up)

Sections: politics (1) business autos (1) jobs (1) career education (1) romance computers phones travel sports fashion health
religion celebs tv-movies music-radio literature webmasters programming techmarket

Links: (1) (2) (3) (4) (5) (6) (7) (8) (9) (10)

Nairaland - Copyright © 2005 - 2024 Oluwaseun Osewa. All rights reserved. See How To Advertise. 9
Disclaimer: Every Nairaland member is solely responsible for anything that he/she posts or uploads on Nairaland.