Natural selection in IT

submitted by

https://isanybodyusingthisprivatekey.com/

That's a meme page. Do NOT submit your real private keys!

35
174

Log in to comment

Hot Top New Old

That’s a meme page. Do NOT submit your real private keys!

Don't tell me what to do with my employers keys.

 reply
85

if you have your employer's keys...

 reply
22
OP

That's ok. Just don't do it with your personal ones.

 reply
19

Page claims to be IPv6 ready...does not actually have an IPv6 address. This isn't a meme, this is a crime

 reply
33

It says it IPv6 ready but doesn't even have any AAAA DNS records.

It does use TLS 1.3, but only AES 128 bits for me.

 reply
30
OP

Always great to see people who check security before putting their personal information in somewhere

 reply
32

well, its ready, nit that its implementer 😏

 reply
23

Glad to see I'm not the only one checking for a AAAA. Looked like a cool and useful site /s but I only use sites with v6.

 reply
8
edited

I went to a similar site, but instead of checking private keys it checked all my credit cards to make sure they weren't on the dark web.

/s

 reply
60
OP

Do you have a link? I want to check mine

 reply
17

Also, check if your PIN has been leaked as well! https://pastebin.com/Nn2ZcdfC

 reply
14

Ah but you can use Cantor's diagonal proof to get a new one. For example if I take the first four and increase the nth digit on the nth row then I get 1114 which isn't in the set.

 reply
3

I could have sworn I had a bank card for a while with a 6-digit pin... Am I crazy? Is that impossible? Or is the joke worn out?

 reply
3

To save anyone the trouble, here's a key I've generated just now: 

-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
QyNTUxOQAAACAqTGrNcWWZrKjDzAgG1KaCYAOOAoqSSQvvWVgUx7PdMgAAAJgzuRsTM7kb
EwAAAAtzc2gtZWQyNTUxOQAAACAqTGrNcWWZrKjDzAgG1KaCYAOOAoqSSQvvWVgUx7PdMg
AAAEC8jODzrMngnvJlMwtlhqwlI6qS42WlzSDADbEYaCsRzCpMas1xZZmsqMPMCAbUpoJg
A44CipJJC+9ZWBTHs90yAAAAEXUwX2E0MzhAbG9jYWxob3N0AQIDBA==
-----END OPENSSH PRIVATE KEY-----

(and if I did it wrong enough, well, you can hack me but please let me know how I fucked up)

Change any random character in there to see how the website reacts to a unique key. I changed an O to an o and it accepted it.

 reply
29

Wait, that's my key. Ohhh QIDBA not QADBX.

 reply
23

FWIW this is what I did:

$ ssh-keygen -f fake_ssh_key

(press Enter twice for no passphrase)

and then:

$ cat fake_ssh_key

Which I then just copy-pasted from the terminal. Surely this can't reveal anything about my other private keys, right?

 reply
18

We know your unique machine ID now.

 reply
0

I'll be impressed if you tell me what operating system I'm using.

 reply
2

How do I upload from my company's yubikey?

 reply
28
edited

Didn't pass captcha to submit my crypto wallet :(

 reply
11
OP

Have you tried disabling VPN?

 reply
7

I just gave away my private key used to access my vps via ssh.

The website is secured with SSL ✓ and network traffic encrypted with TLSv1.3 ✓.
Furthermore, the website uses IPv6 ✓ and my private key is encrypted with AES256 ✓✓✓.

 reply
8
OP edited

And? What was the result? Is your key safe to use?

 reply
3

The disclaimer ruins the joke

 reply
7
edited

I'm pretty sure there was a version without it first.

Still made me laugh 🤷

 reply
4

Yes I do remember it used to not be there

 reply
2

Blocked by defender

 reply
5
OP

Damn. Microsoft did something right?

 reply
4

the answer is yes

 reply
2
Insert image