Programmer Humor

19564 readers

1452 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

Keep content in english
No advertisements
Posts must be related to programming or programmer topics

founded 1 year ago

MODERATORS

[email protected]

326

cat (lemmy.zip)

submitted 3 weeks ago by [email protected] to c/[email protected]

22 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 21 points 3 weeks ago (4 children)

id_rsa shouldn't exist any more.

[–] [email protected] 38 points 2 weeks ago

If I had a nickel for every time I had to change my ssh key algorithm I'd have two nickels.

Which isn't much but it's concerning that it happened twice.

[–] friend_of_satan 24 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

A few days ago I was messing with my ubiquiti dream router and its ssh config option said the key should start with ssh-rsa 🙄

[–] [email protected] 21 points 2 weeks ago (2 children)

It probably accepts other key types and it's just the UI that's outdated. I doubt they're using an SSH implementation other than Dropbear or OpenSSH, and both support ed25519.

[–] [email protected] 3 points 2 weeks ago

Could be stupid input validation which requires ^ssh-rsa

[–] friend_of_satan 1 points 2 weeks ago

I thought this might be the case, but haha, nope!

[–] [email protected] 11 points 2 weeks ago (1 children)

Fact of the matter is RSA is perfectly secure still...and ECDSA/ED25519 should also be extinct given the rising need for post quantum cryptography

[–] [email protected] 15 points 2 weeks ago (1 children)

The problem is not the RSA math itself but that it is both extremely slow and implementing it is particularly susceptible to bugs and side channel attacks https://blog.trailofbits.com/2019/07/08/fuck-rsa/

[–] [email protected] 1 points 2 weeks ago (1 children)

Most of the situations I encounter RSA are in projects where I hope RSA is implemented correctly. I have a lot of Let's Encrypt certs that are still RSA and my main SSH keys are still RSA. All of these were generated quite some time ago. I understand the problem with projects that implement it incorrectly but I'd hope OpenSSH and certbot aren't those projects 😥

[–] computergeek125 1 points 2 weeks ago

For Certbot, I think it's even further up the chain - OpenSSL. And if you're installing it to Apache or Nginx, its probably just OpenSSL again.

[–] [email protected] 2 points 2 weeks ago

Azure DevOps only allows you to use RSA keys. This caused a major outage in May (they switched from V1 to V2) :).