I started testing out CircleCI a bit ago and this really doesn't help seal the d... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		xwowsersx on Oct 30, 2013 \| parent \| context \| favorite \| on: CircleCI security incident I started testing out CircleCI a bit ago and this really doesn't help seal the deal for me. What am I supposed to do now? CircleCI was connected to my github account...are my SSH keys not safe now? If so, not clear on what I'm supposed to do.

robertfw on Oct 30, 2013 [–]

Revoke the CircleCI key that you added to your repo on Github. In the worst case scenario, that key has been compromised and could be used to access your source code.

xwowsersx on Oct 30, 2013 | [–]

I didn't create a new SSH key...I just used my public rsa one. I should just delete that key and create a new one?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact