How I Tripped Over the Debian Weak Keys Vulnerability
Next month will mark the 16th anniversary of the disclosure of a major vulnerability in the Debian OpenSSL package that resulted in predictable private keys. In 2008, a solution was implemented at Engine Yard to address slow SSH login times for GitHub users, involving patching OpenSSH to lookup keys.. read more











