Ars Technica

Using SSH keys stored in keychain

I find myself hopping around from computer to computer occasionally - usually one that I haven't used before. I've got MobileMe syncing almost everything that I need (mail settings, bookmarks, and ...
Ars Technica

Making SSH Private keys more secure

which talks about beefing up the security of the passphrase of your SSH private key. The article (as I understand it) discusses that by default, your SSH private key passphrase is essentially just a ...
Dark Reading

GitHub's Private RSA SSH Key Mistakenly Exposed in Public Repository

GitHub, a Microsoft subsidiary has replaced its SSH keys after someone inadvertently published its private RSA SSH host key part of the encryption scheme in an open GitHub repository. While some may ...
Bleeping Computer

Attackers Start Scans for SSH Keys After Report on Lack of SSH Security Controls

Crooks are mass-scanning online sites for directories containing SSH private keys so they can break into websites with any accidentally exposed credentials. SSH authentication can work via the classic ...
Bleeping Computer

GitHub.com rotates its exposed private SSH key

GitHub has rotated its private SSH key for GitHub.com after the secret was was accidentally published in a public GitHub repository. The software development and version control service says, the ...
techtimes

GitHub's RSA SSH Private Key Leaks! Was It a Breach?

GitHub's RSA SSH private key was accidentally leaked to the public, as confirmed by the code hosting platform's CEO, Mike Hanley. An engineer from the Israeli company "Commun.it" uses his expertise in ...
PC World

OpenSSH patches information leak that could expose private SSH keys

If you’re connecting to servers over the secure shell (SSH) protocol using an OpenSSH client, you should update it immediately. The latest version patches a flaw that could allow rogue or compromised ...
PC World

Millions of embedded devices use the same hard-coded SSH and TLS private keys

Thousands of routers, modems, IP cameras, VoIP phones and other embedded devices share the same hard-coded SSH (Secure Shell) host keys or HTTPS (HTTP Secure) server certificates, a study found. By ...
Network World

Millions of embedded devices use the same hard-coded SSH and TLS private keys

Thousands of routers, modems, IP cameras, VoIP phones and other embedded devices share the same hard-coded SSH (Secure Shell) host keys or HTTPS (HTTP Secure) server certificates, a study found. By ...
InfoWorld

Millions of embedded devices use the same hard-coded SSH and TLS private keys

Keys hard-coded in thousands of routers, modems, IP cameras, VoIP phones and other devices can be used to launch man-in-the-middle attacks Thousands of routers, modems, IP cameras, VoIP phones and ...
Threat Post

Private SSH Key, Weak Default Credentials Removed From ExaGrid Appliances

ExaGrid has removed public-private pairings and weak, hardcoded default credentials from its disk-backup appliances. ExaGrid has removed a private SSH key and weak, hardcoded credentials shipping with ...