174
Natural selection in IT (isanybodyusingthisprivatekey.com)

That's a meme page. Do NOT submit your real private keys!

top 36 comments
sorted by: hot top new old
[-] Korhaka@sopuli.xyz 86 points 1 year ago

That’s a meme page. Do NOT submit your real private keys!

Don't tell me what to do with my employers keys.

[-] sip@programming.dev 22 points 1 year ago

if you have your employer's keys...

[-] tfm@piefed.europe.pub 18 points 1 year ago

That's ok. Just don't do it with your personal ones.

[-] oleorun@lemmy.fan 59 points 1 year ago* (last edited 1 year ago)

I went to a similar site, but instead of checking private keys it checked all my credit cards to make sure they weren't on the dark web.

/s

[-] tfm@piefed.europe.pub 17 points 1 year ago

Do you have a link? I want to check mine

[-] mormegil@programming.dev 13 points 1 year ago

Also, check if your PIN has been leaked as well! https://pastebin.com/Nn2ZcdfC

[-] Crozekiel@lemmy.zip 3 points 1 year ago

I could have sworn I had a bank card for a while with a 6-digit pin... Am I crazy? Is that impossible? Or is the joke worn out?

[-] jaupsinluggies@feddit.uk 3 points 1 year ago

Ah but you can use Cantor's diagonal proof to get a new one. For example if I take the first four and increase the nth digit on the nth row then I get 1114 which isn't in the set.

[-] Scoopta@programming.dev 32 points 1 year ago

Page claims to be IPv6 ready...does not actually have an IPv6 address. This isn't a meme, this is a crime

[-] Anafabula@discuss.tchncs.de 31 points 1 year ago

It says it IPv6 ready but doesn't even have any AAAA DNS records.

It does use TLS 1.3, but only AES 128 bits for me.

[-] tfm@piefed.europe.pub 33 points 1 year ago

Always great to see people who check security before putting their personal information in somewhere

[-] Zahtu@feddit.org 24 points 1 year ago* (last edited 1 year ago)

well, its ready, not that its implemented 😏

[-] Scoopta@programming.dev 8 points 1 year ago

Glad to see I'm not the only one checking for a AAAA. Looked like a cool and useful site /s but I only use sites with v6.

[-] NeatNit@discuss.tchncs.de 30 points 1 year ago

To save anyone the trouble, here's a key I've generated just now:

-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW
QyNTUxOQAAACAqTGrNcWWZrKjDzAgG1KaCYAOOAoqSSQvvWVgUx7PdMgAAAJgzuRsTM7kb
EwAAAAtzc2gtZWQyNTUxOQAAACAqTGrNcWWZrKjDzAgG1KaCYAOOAoqSSQvvWVgUx7PdMg
AAAEC8jODzrMngnvJlMwtlhqwlI6qS42WlzSDADbEYaCsRzCpMas1xZZmsqMPMCAbUpoJg
A44CipJJC+9ZWBTHs90yAAAAEXUwX2E0MzhAbG9jYWxob3N0AQIDBA==
-----END OPENSSH PRIVATE KEY-----

(and if I did it wrong enough, well, you can hack me but please let me know how I fucked up)

Change any random character in there to see how the website reacts to a unique key. I changed an O to an o and it accepted it.

[-] r00ty@kbin.life 23 points 1 year ago

Wait, that's my key. Ohhh QIDBA not QADBX.

[-] NeatNit@discuss.tchncs.de 19 points 1 year ago

FWIW this is what I did:

$ ssh-keygen -f fake_ssh_key

(press Enter twice for no passphrase)

and then:

$ cat fake_ssh_key

Which I then just copy-pasted from the terminal. Surely this can't reveal anything about my other private keys, right?

[-] 30p87@feddit.org 16 points 1 year ago

Yes. It only reveals stuff about your defaults, which should be ed25519 globally now anyway.

[-] A_norny_mousse@feddit.org 0 points 1 year ago

We know your unique machine ID now.

[-] NeatNit@discuss.tchncs.de 2 points 1 year ago

I'll be impressed if you tell me what operating system I'm using.

[-] scrubbles@poptalk.scrubbles.tech 29 points 1 year ago

How do I upload from my company's yubikey?

[-] Thedogdrinkscoffee@lemmy.ca 14 points 1 year ago
[-] oleorun@lemmy.fan 15 points 1 year ago

All I see is *******

[-] goatinspace@feddit.org 11 points 1 year ago* (last edited 1 year ago)

Didn't pass captcha to submit my crypto wallet :(

[-] tfm@piefed.europe.pub 7 points 1 year ago

Have you tried disabling VPN?

[-] goatinspace@feddit.org 10 points 1 year ago* (last edited 1 year ago)

I'm a robot

[-] asudox@lemmy.asudox.dev 8 points 1 year ago* (last edited 1 year ago)

I just gave away my private key used to access my vps via ssh.

The website is secured with SSL βœ“ and network traffic encrypted with TLSv1.3 βœ“. Furthermore, the website uses IPv6 βœ“ and my private key is encrypted with AES256 βœ“βœ“βœ“. Nobody else can access it.

[-] tfm@piefed.europe.pub 3 points 1 year ago* (last edited 1 year ago)

And? What was the result? Is your key safe to use?

[-] krolden@lemmy.ml 7 points 1 year ago

The disclaimer ruins the joke

[-] tfm@piefed.europe.pub 6 points 1 year ago
[-] krolden@lemmy.ml 3 points 1 year ago
[-] A_norny_mousse@feddit.org 4 points 1 year ago* (last edited 1 year ago)

I'm pretty sure there was a version without it first.

Still made me laugh 🀷

[-] krolden@lemmy.ml 2 points 1 year ago

Yes I do remember it used to not be there

[-] Sailing7@lemmy.ml 6 points 1 year ago
[-] lazynooblet@lazysoci.al 5 points 1 year ago
[-] tfm@piefed.europe.pub 4 points 1 year ago

Damn. Microsoft did something right?

[-] iAvicenna@lemmy.world 2 points 1 year ago

the answer is yes

this post was submitted on 27 Aug 2025
174 points (97.3% liked)

Programmer Humor

33083 readers
1727 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 3 years ago
MODERATORS