If you didn't cancel the credit card you used for linode.com, now is the time

Re:If you didn't cancel the credit card you used for linode.... by icebraining on Thursday June 06, 2013 @03:56PM (#5834798)

A public key is a file. It can be stored in more than one place. For example, you can generate both inside the key bastion, and then copy the public key to the public servers, while leaving a copy on the bastion.

[ Parent | on HN ]

Re:If you didn't cancel the credit card you used for linode.... by jmillikin on Thursday June 06, 2013 @04:43PM (#5835050)

But that's not what Linode did. Linode put the private key right next to the public key, where anyone who compromised their web frontend could get at it.

If they had kept their private key where it belonged, we wouldn't be having this discussion because their security alert would have said "...and we have verified that no credit card data was accessed".

[ Parent | on HN ]

Re:If you didn't cancel the credit card you used for linode.... by dllthomas on Thursday June 06, 2013 @05:13PM (#5835207)

And the problem was the private key being on the server running the web front-end, and that's what should be criticized. Presence of a public key does not a webserver make.

[ Parent | on HN ]