We updated our RSA SSH host key

Re:We updated our RSA SSH host key by nicky0 on Friday March 24, 2023 @04:57AM (#35286658)

If someone wanted to trick HN users into trusting a phoney key, one way to do that would be to post the phoney fingerprint on HN claiming it to be the real one.

[ Parent | on HN ]

Re:We updated our RSA SSH host key by iso1631 on Friday March 24, 2023 @05:51AM (#35286997)

And within a few seconds someone will have called this out in a reply

[ Parent | on HN ]

Re:We updated our RSA SSH host key by macintux on Friday March 24, 2023 @07:30AM (#35287650)

Assuming the person doesn’t have some back door access to HN as well.

[ Parent | on HN ]

Re:We updated our RSA SSH host key by detrites on Friday March 24, 2023 @07:57AM (#35287862)

Or they don't simply wait a while and edit it when it's not under high scrutiny.

[ Parent | on HN ]

Re:We updated our RSA SSH host key by iso1631 on Tuesday March 28, 2023 @04:24AM (#35337426)

You can only edit for a certain amount of time

[ Parent | on HN ]

Re:We updated our RSA SSH host key by pferde on Friday March 24, 2023 @06:03AM (#35287066)

And if someone would actually fall for this, they deserve to be fired, and/or never allowed anywhere near anything related to computer security. :)

[ Parent | on HN ]

Re:We updated our RSA SSH host key by misnome on Friday March 24, 2023 @06:40AM (#35287309)

I mean, yes, but you'd also have to have a way to actually MITM the person you are targeting via HN comment, before anyone pointed out it was wrong. It'd be much easier to just use the MITM you already have and not raise the suspicion of posting in a comment.

[ Parent | on HN ]

Re:We updated our RSA SSH host key by nicky0 on Friday March 24, 2023 @01:05PM (#35292103)

Don't overthink this.

[ Parent | on HN ]