Matt Palmer
hezmatt.org/~mpalmer · Personal blog · on HN since 2011
Matt Palmer, a systems engineer, writes about TLS certificates, key security, Debian vulnerabilities, and software pitfalls.
What HN saysHN commenters link his posts on leaked private keys, the Debian weak keys vulnerability, and a follow-up on redacting private keys in documentation.
21HN people shared it
6linked it in comments
30stories submitted
1.1Kstory points
1 year agolast shared
2011people per year2026
Most-shared posts
- 1Hiltonhotels.jp SSL key publicly available4 people · 2 points · first shared 2023 · discussion on HN
- 2How I tripped over the Debian weak keys vulnerability2 people · 339 points · first shared 2024 · 101 comments on HN
- 3Not all TLDs are Created Equal2 people · 229 points · first shared 2024 · 277 comments on HN
- 4Pwned Certificates on the Fediverse2 people · 106 points · first shared 2024 · 19 comments on HN
- 5Why Certificate Lifecycle Automation Matters2 people · 104 points · first shared 2024 · 29 comments on HN
- 6Falsehoods Programmers Believe About Pagination2 people · 5 points · first shared 2018 · 1 comments on HN
- 7Object deserialization attacks using Ruby's Oj JSON parser2 people · 5 points · first shared 2025 · 1 comments on HN
- 8Database Encryption: If It's So Good, Why Isn't Everyone Doing It?2 people · 2 points · first shared 2023 · discussion on HN
- 9Blog2 people · first shared 2024
- 10Information Security: "We Can Do It, We Just Choose Not To"1 people · 88 points · first shared 2024 · 77 comments on HN
- 11"Is This Project Still Maintained?"1 people · 79 points · first shared 2024 · 63 comments on HN
- 12Health industry company sues to prevent certificate revocation1 people · 78 points · first shared 2024 · 63 comments on HN
- 13SSL session caching in nginx1 people · 76 points · first shared 2011 · 17 comments on HN
- 14GitHub's Missing Tab1 people · 4 points · first shared 2024 · discussion on HN
- 15The Mediocre Programmer's Guide to Rust1 people · 3 points · first shared 2024 · discussion on HN
What HN people wrote when they linked it
kdklol · 2023-06-12
The author released another "follow-up" article today: https://www.hezmatt.org/~mpalmer/blog/2023/06/12/private-key-redaction…
pabs3 · 2025-04-03
It is the Debian associated one, he talks about the project on his blog:
https://www.hezmatt.org/~mpalmer/blog/
magnat · 2024-04-26
If you haven't updated your Debian in a while, 1 in 30000 apparently: https://www.hezmatt.org/~mpalmer/blog/2024/04/09/how-i-tripped-over-th…
dang · 2023-06-12
Thanks. How about we change the URL to the more general article, which has more information and doesn't shame anybody.
I've changed it from https://www.hezmatt.org/~mpalmer/blog/2023/06/12/private-key-redaction… now.
remram · 2023-06-12
Generating a new key for documentation seems incredibly easy, or even generating random base64 text. Most of all, searching Google for a random key to use as example seems easiest of all.
I find it hard to believe that anyone would take their actual production key and redact it for documentation. Does the author have evidence of this in practice, or did they see example keys and assume they were redacted production keys?
edit: It seems they have found one: https://www.hezmatt.org/~mpalmer/blog/2023/06/12/private-key-redaction…
Ethan_Barry · 2024-06-11
You got it! By approximate category and in no particular order:
## MISCELLANEOUS
- [Low Tech Magazine](https://solar.lowtechmagazine.com), a solar-powered website showcasing the amazing low-tech things you can do with a little ingenuity,
- [Stephen Wolfram's Blog](https://writings.stephenwolfram.com) on math, compsci, and everything else,
- [Cool Macrophotography](https://www.barrywebbimages.co.uk/Images/Macro/Slime-Moulds-Myxomycete… for amazing pictures of tiny things (WARNING: Time Sink!),
## COMPUTER SCIENCE
- [While-True-Do](https://blog.while-true-do.io) has lots of stuff on Linux administration and self-hosting,
- [Backend Banter](https://www.backendbanter.fm) for a great podcast on backend development,
- [Two Wrongs](https://two-wrongs.com) for statistics and functional programming,
- [Math ∩ Programming](https://www.jeremykun.com/) where math and programming intersect! Written by a Googler...
- [Paul Bourke's site](https://paulbourke.net/) where you can get happily lost exploring old pages on every topic CS touches,
- [Jason Punyon's blog](https://jasonpunyon.com) for some fun algorithms and things,
- [Yossi Kreinin's blog](https://yosefk.com/blog) for C, Python, and plenty of non-technical topics,
- [Adrian Sampson's academic blog](https://www.cs.cornell.edu/~asampson/blog) for an academic's perspective,
- [Cool polyhedra viewer project](https://georgehart.com/virtual-polyhedra/vp.html) if you like geometry,
- [Another academic blog on…