Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
(Scams Subreddit): [Money for your] GitHub PGP keys – is this a scam? (reddit.com)
1 point by shubb on Feb 23, 2020 | hide | past | favorite | 3 comments


Several apparent reports of someone trying to buy old de-activated github pgp keys.

This is probably a social engineering attack - presumably the attacker is gonna want the key pair in the hope the private key will unlock... something else.

What is the default linux ssh key used for that would make a good target? Personal sever instances would be hard to locate, so it is probably something central like cloud provider authentication?

EDIT: Disappointingly, it's this https://github.com/handshake-org/hs-airdrop



They are after your Handshake.org airdrop

It was worth $2k last I heard




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: