Page 1 of 1

GitHub Action Required-SSH Key Vulnerability

Posted: Thu Mar 08, 2012 12:28 am
by Marcel
I just got an e-mail with that title. I'm afraid to open it, thinking it may be some sort of scam or trojan. Has anyone else received this?

RE: GitHub Action Required-SSH Key Vulnerability

Posted: Thu Mar 08, 2012 12:37 am
by Ziusudra
It is legit. They just want you to check that the keys attached to your account were the ones you added.

RE: GitHub Action Required-SSH Key Vulnerability

Posted: Thu Mar 08, 2012 3:59 am
by robn
More information:http://arstechnica.com/business/news/2012/03/hacker-commandeers-github-to-prove-vuln-in-ruby.ars

RE: GitHub Action Required-SSH Key Vulnerability

Posted: Thu Mar 08, 2012 6:11 am
by Guest
I received it too. It appears legit. But for me it claims to be merely informative

RE: GitHub Action Required-SSH Key Vulnerability

Posted: Thu Mar 08, 2012 9:31 am
by Marcel
Thanks guys! Maybe I'm paranoid but it's good to be careful.

RE: GitHub Action Required-SSH Key Vulnerability

Posted: Thu Mar 08, 2012 11:32 am
by Guest

Marcel wrote:
Thanks guys! Maybe I'm paranoid but it's good to be careful.
If it were nobody-knows-what-kind of pishing it would claim for a reply or account pass in every mail they sent. And it appears not to be the case.I think like you and stay alert the first time I do receive a new kind of mail like this. It´s healthy... :mrgreen: Greetings!

RE: GitHub Action Required-SSH Key Vulnerability

Posted: Thu Mar 08, 2012 9:08 pm
by TerranLiason
I got the same email, it's legit.