NixOS disclosed on 6 November that darwin.linux-builder writes its own SSH private key into the world-readable Nix store, where any local account can read it, and that the QEMU builder forwards port 31022 to every network the Mac joins. Both fixes are merged, but updating does not rotate a key already copied out. Weiterlesen: NixOS SSH Key Leak Exposes macOS Linux Builders
Intelligence View
⚡ tsecurity.de Intelligence
NixOS SSH Key Leak Exposes macOS Linux Builders
NixOS disclosed on 6 November that darwin.linux-builder writes its own SSH private key into the world-readable Nix store, where any local account can read it,…
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar