“groovy mother...”

The Debian SSL fubar farrago - some light perspective

If you have a Debian or Ubuntu box and used it to generate an SSH key in the last couple of years, due to a rather heinous bug, there’s a high chance you have one of roughly 260,000 keys.

To put this in perspective, if your account was protected by a 4 lower-case-character password, it would be harder to brute-force access (26⁴ = 456,976).

For the sake of the internet, follow the instructions to update the keys on your servers forthwith.