Re: Prime example of a can of worms

[Hanno Böck <hanno () hboeck de>]

On Wed, 20 Jan 2016 11:07:19 -0700
Kurt Seifried <kseifried () redhat com> wrote:

> Yes it would be bad:
>
> https://blog.shodan.io/duplicate-ssh-keys-everywhere/
>
> There was another analysis with even more worrying numbers but I
> can't find it.

Not sure if that's what you meant, but may be:
http://blog.sec-consult.com/2015/11/house-of-keys-industry-wide-https.html

The more worrying part of that one is that they have not only found
these in the wild, they also extracted the private keys from publicly
available firmware images (and afaik plan to publish them).

-- 
Hanno Böck
http://hboeck.de/

mail/jabber: hanno () hboeck de
GPG: BBB51E42

Attachment: _bin
Description: OpenPGP digital signature