175
Natural selection in IT (isanybodyusingthisprivatekey.com)

That's a meme page. Do NOT submit your real private keys!

top 36 comments
sorted by: hot top controversial new old
[-] Korhaka@sopuli.xyz 85 points 5 months ago

That’s a meme page. Do NOT submit your real private keys!

Don't tell me what to do with my employers keys.

[-] sip@programming.dev 22 points 5 months ago

if you have your employer's keys...

[-] tfm@piefed.europe.pub 18 points 5 months ago

That's ok. Just don't do it with your personal ones.

[-] oleorun@lemmy.fan 60 points 5 months ago* (last edited 5 months ago)

I went to a similar site, but instead of checking private keys it checked all my credit cards to make sure they weren't on the dark web.

/s

[-] tfm@piefed.europe.pub 17 points 5 months ago

Do you have a link? I want to check mine

[-] mormegil@programming.dev 13 points 5 months ago

Also, check if your PIN has been leaked as well! https://pastebin.com/Nn2ZcdfC

[-] Crozekiel@lemmy.zip 3 points 5 months ago

I could have sworn I had a bank card for a while with a 6-digit pin... Am I crazy? Is that impossible? Or is the joke worn out?

[-] jaupsinluggies@feddit.uk 3 points 5 months ago

Ah but you can use Cantor's diagonal proof to get a new one. For example if I take the first four and increase the nth digit on the nth row then I get 1114 which isn't in the set.

[-] Scoopta@programming.dev 34 points 5 months ago

Page claims to be IPv6 ready...does not actually have an IPv6 address. This isn't a meme, this is a crime

[-] Anafabula@discuss.tchncs.de 31 points 5 months ago

It says it IPv6 ready but doesn't even have any AAAA DNS records.

It does use TLS 1.3, but only AES 128 bits for me.

[-] tfm@piefed.europe.pub 33 points 5 months ago

Always great to see people who check security before putting their personal information in somewhere

[-] Zahtu@feddit.org 24 points 5 months ago* (last edited 5 months ago)

well, its ready, not that its implemented 😏

[-] Scoopta@programming.dev 8 points 5 months ago

Glad to see I'm not the only one checking for a AAAA. Looked like a cool and useful site /s but I only use sites with v6.

[-] NeatNit@discuss.tchncs.de 30 points 5 months ago

To save anyone the trouble, here's a key I've generated just now:

-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
QyNTUxOQAAACAqTGrNcWWZrKjDzAgG1KaCYAOOAoqSSQvvWVgUx7PdMgAAAJgzuRsTM7kb
EwAAAAtzc2gtZWQyNTUxOQAAACAqTGrNcWWZrKjDzAgG1KaCYAOOAoqSSQvvWVgUx7PdMg
AAAEC8jODzrMngnvJlMwtlhqwlI6qS42WlzSDADbEYaCsRzCpMas1xZZmsqMPMCAbUpoJg
A44CipJJC+9ZWBTHs90yAAAAEXUwX2E0MzhAbG9jYWxob3N0AQIDBA==
-----END OPENSSH PRIVATE KEY-----

(and if I did it wrong enough, well, you can hack me but please let me know how I fucked up)

Change any random character in there to see how the website reacts to a unique key. I changed an O to an o and it accepted it.

[-] r00ty@kbin.life 23 points 5 months ago

Wait, that's my key. Ohhh QIDBA not QADBX.

[-] NeatNit@discuss.tchncs.de 18 points 5 months ago

FWIW this is what I did:

$ ssh-keygen -f fake_ssh_key

(press Enter twice for no passphrase)

and then:

$ cat fake_ssh_key

Which I then just copy-pasted from the terminal. Surely this can't reveal anything about my other private keys, right?

[-] 30p87@feddit.org 16 points 5 months ago

Yes. It only reveals stuff about your defaults, which should be ed25519 globally now anyway.

[-] A_norny_mousse@feddit.org 0 points 5 months ago

We know your unique machine ID now.

[-] NeatNit@discuss.tchncs.de 2 points 5 months ago

I'll be impressed if you tell me what operating system I'm using.

[-] scrubbles@poptalk.scrubbles.tech 29 points 5 months ago

How do I upload from my company's yubikey?

[-] Thedogdrinkscoffee@lemmy.ca 14 points 5 months ago
[-] oleorun@lemmy.fan 15 points 5 months ago

All I see is *******

[-] goatinspace@feddit.org 11 points 5 months ago* (last edited 5 months ago)

Didn't pass captcha to submit my crypto wallet :(

[-] tfm@piefed.europe.pub 7 points 5 months ago

Have you tried disabling VPN?

[-] goatinspace@feddit.org 10 points 5 months ago* (last edited 5 months ago)

I'm a robot

[-] asudox@lemmy.asudox.dev 8 points 5 months ago* (last edited 5 months ago)

I just gave away my private key used to access my vps via ssh.

The website is secured with SSL βœ“ and network traffic encrypted with TLSv1.3 βœ“. Furthermore, the website uses IPv6 βœ“ and my private key is encrypted with AES256 βœ“βœ“βœ“. Nobody else can access it.

[-] tfm@piefed.europe.pub 3 points 5 months ago* (last edited 5 months ago)

And? What was the result? Is your key safe to use?

[-] krolden@lemmy.ml 7 points 5 months ago

The disclaimer ruins the joke

[-] tfm@piefed.europe.pub 6 points 5 months ago
[-] krolden@lemmy.ml 3 points 5 months ago
[-] A_norny_mousse@feddit.org 4 points 5 months ago* (last edited 5 months ago)

I'm pretty sure there was a version without it first.

Still made me laugh 🀷

[-] krolden@lemmy.ml 2 points 5 months ago

Yes I do remember it used to not be there

[-] Sailing7@lemmy.ml 6 points 5 months ago
[-] lazynooblet@lazysoci.al 6 points 5 months ago
[-] tfm@piefed.europe.pub 4 points 5 months ago

Damn. Microsoft did something right?

[-] iAvicenna@lemmy.world 2 points 5 months ago

the answer is yes

this post was submitted on 27 Aug 2025
175 points (97.3% liked)

Programmer Humor

29603 readers
1203 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 2 years ago
MODERATORS