Spyke
sopuli.xyz

That’s a meme page. Do NOT submit your real private keys!

Don't tell me what to do with my employers keys.

85
lemmy.fan

I went to a similar site, but instead of checking private keys it checked all my credit cards to make sure they weren't on the dark web.

/s

58

I could have sworn I had a bank card for a while with a 6-digit pin... Am I crazy? Is that impossible? Or is the joke worn out?

3

Ah but you can use Cantor's diagonal proof to get a new one. For example if I take the first four and increase the nth digit on the nth row then I get 1114 which isn't in the set.

3

Page claims to be IPv6 ready...does not actually have an IPv6 address. This isn't a meme, this is a crime

31

It says it IPv6 ready but doesn't even have any AAAA DNS records.

It does use TLS 1.3, but only AES 128 bits for me.

31

Always great to see people who check security before putting their personal information in somewhere

33

Glad to see I'm not the only one checking for a AAAA. Looked like a cool and useful site /s but I only use sites with v6.

8
discuss.tchncs.de

To save anyone the trouble, here's a key I've generated just now:

-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
QyNTUxOQAAACAqTGrNcWWZrKjDzAgG1KaCYAOOAoqSSQvvWVgUx7PdMgAAAJgzuRsTM7kb
EwAAAAtzc2gtZWQyNTUxOQAAACAqTGrNcWWZrKjDzAgG1KaCYAOOAoqSSQvvWVgUx7PdMg
AAAEC8jODzrMngnvJlMwtlhqwlI6qS42WlzSDADbEYaCsRzCpMas1xZZmsqMPMCAbUpoJg
A44CipJJC+9ZWBTHs90yAAAAEXUwX2E0MzhAbG9jYWxob3N0AQIDBA==
-----END OPENSSH PRIVATE KEY-----

(and if I did it wrong enough, well, you can hack me but please let me know how I fucked up)

Change any random character in there to see how the website reacts to a unique key. I changed an O to an o and it accepted it.

30
NeatNitreply
discuss.tchncs.de

FWIW this is what I did:

$ ssh-keygen -f fake_ssh_key

(press Enter twice for no passphrase)

and then:

$ cat fake_ssh_key

Which I then just copy-pasted from the terminal. Surely this can't reveal anything about my other private keys, right?

19

Yes. It only reveals stuff about your defaults, which should be ed25519 globally now anyway.

15
lemmy.asudox.dev

I just gave away my private key used to access my vps via ssh.

The website is secured with SSL ✓ and network traffic encrypted with TLSv1.3 ✓. Furthermore, the website uses IPv6 ✓ and my private key is encrypted with AES256 ✓✓✓. Nobody else can access it.

8

You reached the end

Natural selection in IT | Spyke