News for hackers. Stuff that matters.
Re:We updated our RSA SSH host key by theteapot on Friday March 24, 2023 @06:29AM (#35287230)
> The private key was exposed in a public GitHub repo.

How do you know this?

Github runs scanner for private keys in public and private repos and notifies owner (I did it once so I know ... ;)). So some Github engineer likely would have received such an email if what you say is true. Hilarious.

Re:We updated our RSA SSH host key by Veen on Friday March 24, 2023 @06:31AM (#35287249)
It says exactly that in the article:

> This week, we discovered that GitHub.com’s RSA SSH private key was briefly exposed in a public GitHub repository

Hilarious.

Re:We updated our RSA SSH host key by theteapot on Friday March 24, 2023 @06:56AM (#35287418)
I didn't read it fully before commenting. I'm sorry.
Re:We updated our RSA SSH host key by comprev on Saturday March 25, 2023 @09:43AM (#35302544)
If everyone read the entire article of each HN submission the comments section would be wildly different :-)
Re:We updated our RSA SSH host key by adrr on Friday March 24, 2023 @08:06AM (#35287938)
I can’t see that could ever happen. Is the key just floating around on their employees computers and skeins accidentally committed it?
Re:We updated our RSA SSH host key by roblabla on Friday March 24, 2023 @06:34AM (#35287262)
Maybe because the article says so?

> This week, we discovered that GitHub.com’s RSA SSH private key was briefly exposed in a public GitHub repository

Re:We updated our RSA SSH host key by 3np on Friday March 24, 2023 @06:31AM (#35287248)
From the OP:

> This week, we discovered that GitHub.com’s RSA SSH private key was briefly exposed in a public GitHub repository.