SoylentNews

Adobe Accidentally Publishes One of its Private PGP Keys

posted by martyb on Saturday September 23 2017, @04:10PM   
from the information-wants-to-be-free? dept.

takyon writes:

Adobe is showing that it can be transparent about its security practices:

Having some transparency about security problems with software is great, but Adobe's Product Security Incident Response Team (PSIRT) took that transparency a little too far today when a member of the team posted the PGP keys for PSIRT's e-mail account—both the public and the private keys. The keys have since been taken down, and a new public key has been posted in its stead.

The faux pas was spotted at 1:49pm ET by security researcher Juho Nurminen:

Oh shit Adobe pic.twitter.com/7rDL3LWVVz
— Juho Nurminen (@jupenur) September 22, 2017

Nurminen was able to confirm that the key was associated with the psirt@adobe.com e-mail account.

Also at The Register and Wccftech.

[How many here have done something like this? Perhaps an extra file accidentally uploaded to GitHub? --Ed.]

---

Original Submission

• Don't type your password into the username box(Score: 1, Funny) by Anonymous Coward on Saturday September 23 2017, @08:41PM

  by Anonymous Coward on Saturday September 23 2017, @08:41PM (#572163)

  Cuz then instead of the lovely *** you get the actual chars visible!

  What a stupid thing to do but has happened to me more than once.

  Starting Score:	0		points
  Moderation		+1
  Funny=1, Total=1
  Extra 'Funny' Modifier		0
  Total Score:		1