Matt Palmer

hezmatt.org/~mpalmer · Personal blog · on HN since 2011

Matt Palmer, a systems engineer, writes about TLS certificates, key security, Debian vulnerabilities, and software pitfalls.

What HN saysHN commenters link his posts on leaked private keys, the Debian weak keys vulnerability, and a follow-up on redacting private keys in documentation.
21HN people shared it
6linked it in comments
30stories submitted
1.1Kstory points
1 year agolast shared
2011people per year2026

Most-shared posts

  1. 1
    Hiltonhotels.jp SSL key publicly available
    4 people · 2 points · first shared 2023 · discussion on HN
  2. 2
    How I tripped over the Debian weak keys vulnerability
    2 people · 339 points · first shared 2024 · 101 comments on HN
  3. 3
    Not all TLDs are Created Equal
    2 people · 229 points · first shared 2024 · 277 comments on HN
  4. 4
    Pwned Certificates on the Fediverse
    2 people · 106 points · first shared 2024 · 19 comments on HN
  5. 5
    Why Certificate Lifecycle Automation Matters
    2 people · 104 points · first shared 2024 · 29 comments on HN
  6. 6
    Falsehoods Programmers Believe About Pagination
    2 people · 5 points · first shared 2018 · 1 comments on HN
  7. 7
  8. 8
  9. 9
    Blog
    2 people · first shared 2024
  10. 10
  11. 11
    "Is This Project Still Maintained?"
    1 people · 79 points · first shared 2024 · 63 comments on HN
  12. 12
  13. 13
    SSL session caching in nginx
    1 people · 76 points · first shared 2011 · 17 comments on HN
  14. 14
    GitHub's Missing Tab
    1 people · 4 points · first shared 2024 · discussion on HN
  15. 15
    The Mediocre Programmer's Guide to Rust
    1 people · 3 points · first shared 2024 · discussion on HN

What HN people wrote when they linked it

kdklol · 2023-06-12
The author released another "follow-up" article today: https://www.hezmatt.org/~mpalmer/blog/2023/06/12/private-key-redaction…
pabs3 · 2025-04-03
It is the Debian associated one, he talks about the project on his blog: https://www.hezmatt.org/~mpalmer/blog/
magnat · 2024-04-26
If you haven't updated your Debian in a while, 1 in 30000 apparently: https://www.hezmatt.org/~mpalmer/blog/2024/04/09/how-i-tripped-over-th…
dang · 2023-06-12
Thanks. How about we change the URL to the more general article, which has more information and doesn't shame anybody. I've changed it from https://www.hezmatt.org/~mpalmer/blog/2023/06/12/private-key-redaction… now.
remram · 2023-06-12
Generating a new key for documentation seems incredibly easy, or even generating random base64 text. Most of all, searching Google for a random key to use as example seems easiest of all. I find it hard to believe that anyone would take their actual production key and redact it for documentation. Does the author have evidence of this in practice, or did they see example keys and assume they were redacted production keys? edit: It seems they have found one: https://www.hezmatt.org/~mpalmer/blog/2023/06/12/private-key-redaction…
Ethan_Barry · 2024-06-11
You got it! By approximate category and in no particular order: ## MISCELLANEOUS - [Low Tech Magazine](https://solar.lowtechmagazine.com), a solar-powered website showcasing the amazing low-tech things you can do with a little ingenuity, - [Stephen Wolfram's Blog](https://writings.stephenwolfram.com) on math, compsci, and everything else, - [Cool Macrophotography](https://www.barrywebbimages.co.uk/Images/Macro/Slime-Moulds-Myxomycete… for amazing pictures of tiny things (WARNING: Time Sink!), ## COMPUTER SCIENCE - [While-True-Do](https://blog.while-true-do.io) has lots of stuff on Linux administration and self-hosting, - [Backend Banter](https://www.backendbanter.fm) for a great podcast on backend development, - [Two Wrongs](https://two-wrongs.com) for statistics and functional programming, - [Math ∩ Programming](https://www.jeremykun.com/) where math and programming intersect! Written by a Googler... - [Paul Bourke's site](https://paulbourke.net/) where you can get happily lost exploring old pages on every topic CS touches, - [Jason Punyon's blog](https://jasonpunyon.com) for some fun algorithms and things, - [Yossi Kreinin's blog](https://yosefk.com/blog) for C, Python, and plenty of non-technical topics, - [Adrian Sampson's academic blog](https://www.cs.cornell.edu/~asampson/blog) for an academic's perspective, - [Cool polyhedra viewer project](https://georgehart.com/virtual-polyhedra/vp.html) if you like geometry, - [Another academic blog on…

Keyboard shortcuts

/Search
j kNext / previous blog
EnterOpen selected blog
vVisit the blog site
fFollow / unfollow
lSwitch grid / list view
dSwitch dark mode
g hHome
g pTop posts
g tTopics
g fFollowing
g lLiked
g yHistory
g qFAQ
EscBack / close