TL;DR: Make sure your GitHub organization is secure by checking that your org’s users have a sufficiently large key bittages and types (including elliptic) using this tool I wrote. It wasn’t long ago that Ben Cox’s fantastic blog post revealed the potential threats from weak SSH keys installed on GitHub user profiles (and GitHub now disallows the […]

I’m upgrading my SSH RSA key to a higher bittage. —- BEGIN SSH2 PUBLIC KEY —- Comment: “Jack Kingsman RSA” AAAAB3NzaC1yc2EAAAABJQAAAgEAtBF4UbmlPNzUIUpHE4v1SrbvBKx5ULmjq/eU 1solR7efI5H0V9+XyPy6CcaNXlxlKGLvyIygC70s0cAA2tKkqp/TAyDyGeHwV+5e rS3RTs0eS5NfJlMp/7cW9vpmppEgYCLCsB92a7mTrFavR3NCxW+6RujSReFmn/l2 aq2NOdzRS1sqV+ooOTSzlvTW5fU7afSwhgawUxTdOQjypI3aQ7oB8CoMouapLx38 X9pMhzE+oypwKpujotCXKtVQg/+Sli1cIaPePcdGd9ithhRw5nVdv9fzpS//XIng aRjE/uWF08QtKQ6GYB/cauk+pe49KzsBLQH/irai3n78JP8svkXdRtCZetk0Np4c q/BrVOt6JVPaNYNmYoxsKJw+RTtHM5xuRYWMlnm/Sb0s3FwFByE7de6stZPlYORJ 9e3pVMSBTNIxPpMVqS9fv1Q7+l1u7xflWDh7KLSlD5t7QhlYzL1zA3nup/7ZTYks 5f7MRAqsLOiNBOHNGSC7+2YlZMiQYnqELbX9LGbH0DN0xOw1jqv97Xf4BAHMp7BK +3R6NuSiDH1hukSR+UC2LrNL2uLfOPQ0fmhqS7OoUMu4VzI1qmke+q+T3eRZ0DLM FASjB0jLfLhM84OpW9BXgcoTVdD3b0+ple1qoByW3PX6M18HfoB7cXkmBV1q7XRo Y9SIJh8= —- END SSH2 PUBLIC KEY —- ssh-rsa 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 Jack Kingsman RSA You can easily replace my old key with the new one by […]

I’m proud to announce my very first module released on NPM! This module parses and extracts info from OpenSSH authorized_keys format public keys. It’s simple, minimal, but functional, and plays a key role in an upcoming utility I’ll be releasing the next few days for GitHub Organization security auditing.